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It’s  March  1,  somewhere  on 
the  Indian  Ocean.  Do  you 
know  where  your  shipment  is? 
Soon,  the  U.S.  government 
will  demand  that  you  do. 
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A  Shipper  Managing  15  Billion  Transactions  a  Year. 

Running  on  Microsoft  SQL  Server  2005. 


Mediterranean  Shipping  Company,  the  world's  second  largest  containership  line,  tracks 
7  million  containers  out  of  116  countries.  Upgrading  their  mission-critical  5TB  database 
to  SQL  Server™  2005  delivered  99.999%  availability*  See  how  at  microsoft.com/bigdata 
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Try  it  free  for  30  days.*  If  your  job 
gets  too  boring,  give  it  back. 

With  total-flow  inspection  at 
|  multi-Gigabit  speeds  for  complete 

network  protection,  it's  obviously 

the  best  security  solution  on  the 
market.  But  if  you  still  have  doubts, 
try  it  for  30  days.  Be  forewarned, 
though.  Once  you  do,  you  won't  want 
to  give  it  back.  For  your  free  trial, 

|  call  1-888-TRUE  IPS  or  go  to  the  ZWm 

Web  address  below.  ~  vj 
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3Com 


TippingPoint 

a  division  of  3Com 

tippingpoint.com/free_trial 


security  — 

VoIP 

wireless 

switching 

routing 

services 


Open  to  qualtlied  applicants.  Subject  to  credit  check  and  acceptance  of  evaluation  agreement.  Other  restrictions  may  apply.  3Com  reserves  the  right  to  end  the  evaluation  program  at  any  time. 
Copyright  ©  2006  3Com  Corporation  All  rights  reserved.  3Com  and  the  3Com  logo  are  registered  trademarks  of  3Com  Corporation.  TippingPoint  is  a  trademark  of  3Com  Corporation. 

All  other  company  and  product  names  may  be  trademarks  of  their  respective  companies. 


Yossi  Sheffi,  director  of  MIT’s 
Center  for  Transportation 
and  Logistics,  says  resilient 
companies  have  redundancy 
and  empowered  employees. 
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MIT  logistics  expert  Yossi  Sheffi  talks  with 
CIO  about  what  companies  can  do  to  recover 
quickly  from  almost  any  type  of  disaster. 

By  Susannah  Patton 
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Deputy  Commissioner  and  CIO  Jim  Onalfo 
put  his  experience  and  discipline  to  the  test 
in  order  to  turn  around  IT  at  the  NYPD. 

By  Thomas  Wailgum 
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website  more  engaging  for  customers  and 
more  profitable  for  you.  By  Meridith  Levinson 


Security  Compliance 

COVER  STORY 
CUSTOMS  RATTLES 
THE  SUPPLY  CHAIN  |  40 

The  government  wants  you  to  secure  your 
supply  chain.  Right  now,  its  program  is 
voluntary.  It  won’t  stay  that  way  for  long. 
And  the  responsibility  for  collecting  the  data 
Uncle  Sam  wants  is  going  to  fall  on— you 
guessed  it— the  CIO. 

By  Ben  Worthen 
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In  the  U.S.  and  Canada,  contact  your 

Motion  Solution  Provider, 
call  1 .866.MTABLET  or 
visit  www.motioncomputing.com 


The  LE1600  Tablet  PC  offers  a  true  breakthrough  in  optimizing  mobility, 
battery  life  and  flexibility.  Today's  business  world  moves  fast. 
Count  on  Motion  for  smart  mobile  computing  products 

that  keep  you  ahead  of  the  game. 


Motion's  LEI  600  12.1"  display 
and  Intel®  Centrino®  Mobile 
Technology  gives  you  exceptional 
mobile  performance  and  productivity. 


tion  Computing,  Inc.  All  rights  reserved.  All  product  information  is  subject  to  change  without  notice.  Motion  Computing,  Speak  Anywhere  and  View  Anywhere  are  registered  trademarks  and 
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The  remarkable  Motion  LE1600  Tablet  PC  with  Intel®  Centrino®  Mobile  Technology  and 
integrated  high-speed  wireless  delivers  exceptional  mobile  performance  and 
productivity.  Experience  the  versatility  and  mobility  of  the  Motion  LEI  600 
pre-installed  with  Microsoft®  Windows®  XP  Tablet  PC  Edition  2005. 

It's  pure  innovation  right  in  your  hands. 


Motion  recommends 
Microsoft®  Windows®  XP  Tablet  PC  Edition. 


Experience  advanced  design  features  that  let  you  move  and  work  freely  -  like 
Motion’s  1 2.1 "  View  Anywhere®  display  for  crisp,  wide-angle  viewing,  both 
indoors  and  out.  Record  audio  notes  with  Speak  Anywhere®  technology 
that  intelligently  cancels  out  unwanted  noise  and  distractions,  even 
in  loud  locations.  Go  ahead  and  push  mobile  computing  to  the 
imit  -  the  slim  Extended  Battery  keeps  you  productive 

for  up  to  a  full  day. 
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Hidden 


Costs 
Come 
Home  to 
Roost 

The  savings  that  companies 
reap  from  offshoring  come 
with  a  risk.  And  risk  always 
has  a  price. 


6  MARCH  i,  2006  |  www.cio.com 


As  the  new  year  began,  the  news  was  full  of  American  companies  expanding  their 
outsourcing  investments  in  India,  China  and  elsewhere.  Cheap  materials  and  cheaper 
labor  make  offshoring  a  no-brainer  for  everyone  from  service  providers  to  manufac¬ 
turers.  And  so  CIOs  have  had  to  think  about  readying  their  enterprise  infrastructures 
to  make  the  most  of  those  opportunities. 

But  now  they  have  to  think  about  something  else:  the  Customs-Trade  Partnership 
Against  Terrorism,  or  C-TPAT,  which  requires  that  companies  take  responsibility  for  the 
security  of  their  supply  chains.  Anyone  bringing  shiploads  or  truckloads  of  anything  into 
the  United  States  needs  to  be  able  to  account  for  the  status  and  whereabouts  of  their 
goods  at  all  times,  even  “if  the  con¬ 
tainer  is  in  the  custody  of  a  trucker  in 
China  or  a  longshoreman  in  Rio  de 
Janeiro,”  reports  Senior  Writer  Ben 
Worthen  in  our  cover  story,  “Customs 
Rattles  the  Supply  Chain,”  Page  40. 

Right  now,  participation  in  the 
C-TPAT  program  is  voluntary,  with 
the  government  offering  the  incen¬ 
tive  of  expedited  Customs  clearance  for  those  who  comply.  But  through  a  nifty  bit  of  dig¬ 
ging,  Worthen  has  discovered  that  the  government  is  moving  vigorously  and  swiftly  in 
the  direction  of  making  compliance  mandatory  for  all  companies  bringing  goods  into 
the  United  States.  “There’s  no  doubt  that  this  is  going  to  happen,”  Kevin  Smith,  general 
director  of  global  customs  of  General  Motors,  told  Worthen.  “This  is  an  inevitability.” 

As  you  read  Worthen’s  story,  you  will  naturally  reflect  on  all  the  work  and  all  the 
money  that  C-TPAT  compliance  is  going  to  cost.  Securing  your  supply  chain  will 
require  a  ton  of  IT,  especially,  as  is  usually  the  case,  when  your  offshore  partner  is  not 
as  technologically  advanced  as  you  are  and  is  not  collecting  the  data  that  Customs  will 
require.  And  perhaps  you  will  be  reminded  of  the  Sarbanes-Oxley  Act,  which  demands 
that  you  take  responsibility  for  the  accuracy  and  security  of  your  company’s  financial 
reporting.  That  burden,  too,  falls  heavily  upon  CIOs. 

But  before  you  begin  railing  about  government  interference  in  commerce,  and  before 
you  begin  questioning  how  effective  C-TPAT  will  eventually  be  in  mitigating  risk  (and 
whether  or  not  that  degree  of  safety  is  worth  the  expense),  remember  this:  Just  as  Sar¬ 
banes-Oxley  ultimately  was  the  price  of  the  accounting  scandals  and  executive  malfea¬ 
sance  that  brought  us  Enron,  Global  Crossing,  Tyco,  WorldCom,  Adelphi  and  the  rest, 
C-TPAT  is  the  price  of  offshoring.  It  is  the  price  of  the  risk  you  assume  when  you  go  out 
into  an  increasingly  hostile  and  insecure  world  to  harvest  all  those  cheap  materials  and 
all  that  cheap  labor.  It  is  a  hidden  cost  but  no  less  real  for  that.  And  no  matter  what  you 
conclude  about  offshoring’s  risks  and  benefits,  one  thing  is  for  certain: 

The  cost  is  about  to  go  up. 

David  Rosenbaum,  Managing  Editor 

drosenbaum@cio.com 


Just  as  Sarbanes-Oxley 
ultimately  was  the  price  of  the 
accounting  shenanigans  that 
brought  us  Enron,  Global 
Crossing,  Tyco,  WorldCom, 
Adelphi  and  the  rest,  C-TPAT 
is  the  price  of  offshoring. 
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EDS  and  the  EDS  logo  are  registered  trademarks  of  Electronic  Data  Systems  Corporation.  ©2005  EDS. 


MEETING  WON'T  LIFT  A  CRATE. 

WISHING  WON'T  LIFT  A  CRATE. 

TALKING  WON'T  LIFT  A  CRATE. 

IF  YOU  WANT  TO  LIFT  A  CRATE, 
USE  A  PULLEY. 

We  want  to  help  you  streamline  your 
business  and  make  it  work  better. 

No  matter  how  impossible  that  may  seem. 
From  providing  the  capabilities  to  centralize 
your  supply  and  inventory  management,  to 
implementing  an  integrated  IT  solution  that 
synchronizes  your  operations  far  and  wide. 
And  we  won’t  wish  for  it.  Or  hope  to  do  it. 
We’ll  get  it  done.  Like  we  did  working  with 
Daikin,  the  Asia-based  air-conditioner 
manufacturer  who  wanted  to  gain  a 
competitive  advantage  by  establishing  a 
supply  structure  that  would  never  encounter 
a  shortage.  Together  we  implemented  a 
solution  that  connected  production  units 
with  both  suppliers  and  customers  to  ensure 
faster,  more  cost-effective  delivery.  Helping 
them  become  both  leaner  and  bigger. 

So  if  you  want  to  raise  your  company's 
standard  of  efficiency,  think  of  us  as  your 
pulley.  It's  what  we  do.  And  we  want  to  do 
it  for  you.  www.eds.com 


Let’s  get  to  work. 
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■  trademarks  of  BMC  Software,  Inc.  All  other  registered  trademarks  or 
‘trademsrks  belong  to  their  respective  companies,  ©2006  BMC  Software,  Inc. 


TOYOTA  MOTORSPORT  FOUND  THAT  BUSINESS  SERVICE  MANAGEMENT 
PUT  BOTH  THEIR  I.T.  SOLUTIONS  AND  THEIR  FORMULA  ONE  RACECARS  IN  THE 


And  it  all  began  with  the  leadership  of  BMC  Software.  From  real-time,  track-side 
data  feeds  to  accelerated  design  processes,  our  BSM  solutions  helped  Toyota 


Motorsport  align  IT  systems  with  business  and  racing  objectives. That's  the  power 
of  BSM.  It's  not  just  about  technology.  It's  about  how  technology  can  activate  your 
business.  By  slashing  costs,  ramping  up  revenue  and  mitigating  risk,  BMC  Software 
can  give  you  fast,  predictable  results.  Just  askToyota  Motorsport,  or  the  hundreds 
of  other  companies  who  are  reaping  the  benefits  of  BSM. Then,  take  the  first  step 
toward  activating  your  own  business. The  card  below  is  the  place  to  start. 


Dave  Jenkins 

Business  Service  Management 

Solution  Center 

Call  an  expert  or 

log  on  today  to  put  BSM 

to  work  for  you. 

<  bmcsoftware 

2101  CityWest  Blvd 

Houston,  Texas  77042 

800  596  2154 

www.bmc.com/starthere3 

<  bmcsoftware 


i  <  •  ; 


ACTIVATE  BUSINESS 

WITH  THE  POWER  OF  I.T 


BUSINESS  TECHNOLOGY  LEADERSHIP 


FROM  THE  PUBLISHER 


The  Leadership  Factor 

Leaders  are  made,  not  born,  and  at  our  upcoming  CIO 
Leadership  Conference,  we’ll  be  helping  to  make  them 


To  paraphrase  H.  Ross  Perot,  IT  infra¬ 
structure  can  be  managed;  people  must  be  led. 

CIOs  may  have  access  to  hot  technologies  and 
big,  fat,  multimillion-dollar  budgets,  but  unless 
they  know  how  to  lead  people,  they  remain  man¬ 
agers,  not  leaders. 

From  May  8-10  at  the  Charles  Hotel  in  Cam¬ 
bridge,  Mass.,  CIO  magazine  and  the  CIO  Exec¬ 
utive  Council  will  host  the  2006  CIO  Leadership 
Conference  and  introduce  the  new  class  of  “Ones 
to  Watch,”  the  magazine  and  Council’s  pick  of  the  best  and  brightest  up-and- 
coming  IT  leaders. 

CIOs  have  unique  leadership  challenges.  They  must  be  astute  technologists,  but 
they  must  be  even  more  astute  business-savvy  executives.  No,  make  that  business- 
savvy  leaders. 

They  must  also  be  multilingual.  They  have  to  speak  the  language  of  executive 
boards,  line-of-business  executives,  shareholders,  partners,  staff  and  customers. 
We  aim  to  share  with  conference  attendees  just  how  to  speak  effectively  to  all  of 
these  varied  constituencies. 

The  agenda  for  the  CIO  Leadership  Conference  will  focus  squarely  on  how  great 
IT  leaders  are  made,  bringing  together  a  unique  collection  of  leading  thinkers  and 
practitioners.  Sessions,  presentations  and,  most  important,  hallway  conversations 
will  help  those  who  attend  elevate  their  leadership  status  within  their  businesses. 

Are  you  interested  in  becoming  a  leader?  Or  being  a  better  one?  Join  us  in 
May  at  the  2006  CIO  Leadership  Conference.  I  promise  you  the  experience  will 
elevate  your  leadership  aspirations  and  skills. 

Registration  information  and  the  conference  agenda  can  be  found  at  www.cio.com/ 
leaders/rsvp. 

See  you  there. 


GaryJ.  Beach,  Publisher 

gbeach@cio.com 
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When  it  came  to  their  AV  design  and  installation, 


The  Gaylord  Texan 
could  have  worked 
with  anyone. 

They  chose  us. 

Audiovisual 
M*  u  Innovations 


Audio  Visual  Innovations  recently  helped  The  Gaylord  Texan  Hotel  &  Convention  Center  with  their 
new  facility,  and  we  can  help  you,  too.  Working  closely  with  architects,  designers,  facilities  managers  and 
both  IT  and  construction  professionals,  AVI  designs,  builds  and  installs  world-class  audiovisual  environments 
for  all  forms  of  presentation,  communication  and  collaboration. 

From  boardrooms,  classrooms  and  courtrooms  to  auditoriums,  healthcare  and  mission-critical  monitoring  facilities, 
AVI's  extensive  project  and  client  list  reflects  the  breadth  and  depth  of  our  expertise  and  experience. 

In  business  since  1979,  AVI  is  America’s  premier  AV  system  design  and  integration  company,  fielding  multiple 
teams  of  experts  that  include  engineers,  project  managers,  CAD  technicians  and  other  construction  and 
audiovisual  industry  professionals.  AVI  is  a  national  company.  Our  size  and  strength  give  us  unrivaled  access 
to  the  widest  range  of  products,  all  the  latest  technologies,  and  a  level  of  purchasing  power  that  ensures 
substantial  value  for  all  of  our  customers. 

Whether  you’re  creating  a  new  facility  or  upgrading  an  existing  one,  let  Audio  Visual  Innovations  design  and  install 
the  technology  solution  that  will  project  the  best  possible  image  for  your  organization.  For  more  information, 
including  additional  case  studies,  please  visit  our  website,  www.aviinc.com.  To  discuss  your  specific  needs 
with  an  AVI  representative,  give  us  a  call  at  1-866-634-7265. 
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Your  Source  For  Being  Seen  And  Heard. 
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PLAYER 


Global  companies  have  teams  everywhere. 

To  help  them  share  ideas,  Xerox  multifunction  systems 
and  software  put  everyone  on  the  same  playing  field. 

There’s  a  new  way  to  look  at  it. 


Running  a  global  company  requires  secure  worldwide 
information  sharing.  Luckily,  Xerox  has  a  solution  for 
everyone  on  your  team.  Using  Xerox  multifunction 
systems  and  Xerox  DocuShare®  software,  documents 
can  be  securely  scanned  to  the  Web.  This  way  people 
throughout  your  global  network  can  share  them.  This 


xerox.com/office/team 
1-800-ASK-XEROX  ext.  753 


keeps  documents  current,  can  eliminate  warehousing 
needs  by  70%  and  can  reduce  order  fulfillment  time  by 
80%.  Whatever  Xerox  WorkCentre®  multifunction  system 
you  choose,  you’ll  reduce  costs  by  printing,  copying, 
scanning  and  faxing  from  one  convenient  network  device. 
Now  that’s  a  game  plan.  To  learn  more,  contact  us  today. 

XEROX. 

|  Technology  |  Document  Management  |  Consulting  Services  | 


©  2005  Xerox  Corporation.  All  rights  reserved.  XEROX*  WorkCentre* DocuShare*  and  There's  a  new  way  to  look  at  it*  are  trademarks  of  Xerox  Corporation  in  the  United  States  and/or  other  countries. 


TINA  BROWN-STEVENSON 

PRESIDENT,  AETNA  INTEGRATED  INFORMATICS 


SAS  gives  Aetna 


how  to  use  predictive  analytics  to  improve  patient  outcomes 
and  head  off  high  medical  costs. 


More  than  14  million  people  rely  on  Aetna,  one  of  America’s  leading  health  insurance  providers.  Aetna, 
in  turn,  relies  on  SAS  for  a  healthy  dose  of  innovation.  Using  SAS'6’  analytic  software,  Aetna  can  review  its 
member  population  and  make  accurate  predictions  about  costly  medical  and  disability  events  -  before 
they  happen.  Aetna  then  shares  that  information  with  care  managers  in  a  simple,  easy-to-use  format 
that  allows  them  to  make  an  impact  on  medical  outcomes.  As  a  result,  care  managers  can  offer  at-risk 
individuals  the  facts  they  need  to  make  more  informed  choices  that  can  help  improve  quality  outcomes 
and  reduce  healthcare  costs,  Learn  more  about  Aetna  and  other  SAS  success  stories,  or  view  our  free 
on-demand  Webcasts. 


www.sas.com/aetna 


SAS  and  all  other  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc.  in  the  USA  and  other  countries.  ®  indicates  USA  registration.  Other  brand  and  product  names  are  trademarks  of  their  respective  companies.  ©  2006  SAS  Institute  Inc.  All  rights  reserved.  372847US.01 
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IT  Helps  Rebuild 
New  Orleans 

When  New  Orleans  officials  unveiled 
a  city  recovery  plan  in  January,  more  than  a  few  residents  were 
angry.  The  plan  proposed  that  residents  and  experts  form  plan¬ 
ning  teams  and  decide  by  May  the  fate  of  neighborhoods  heavily 
damaged  by  Hurricane  Katrina,  and  it  put  a  moratorium  on 
any  individual  rebuilding  in  those  areas  until  then.  Many  New 
Orleanians  protested  both  the  extended  ban  on  rebuilding  and 
the  requirements  for  whether  an  existing  neighborhood  will  be 
preserved  (half  the  residents  must  commit  to  returning). 

Coming  to  consensus  about  community  planning  is  always  diffi¬ 
cult,  but  it’s  particularly  complex  after  a  disaster  like  Katrina  and 
in  a  city  like  New  Orleans,  which  already  had  big  problems  with 
land  use,  says  Ken  Snyder,  chairman  with  the  IT  division  of  the 
American  Planners  Association  (APA).  Getting  public  feedback 
early  helps  planners  and  developers  avoid  costly  roadblocks. 

Snyder  has  been  experimenting  for  five  years  with  a  variety  of 
technologies—including  content  management  systems,  group- 

Continued  on  Page  16 


Software  That  Knows  What  You  Want  to  Hear 


customization  Using  computers  for  a 
task  as  subjective  as  discerning  your  music  tastes 
sounds  like  a  tall  order.  Nevertheless,  some 
commercial  companies  and  research  organi¬ 
zations  are  developing  software  designed 
to  analyze  the  music  you  like  and 
recommend  tunes,  even  from  groups 
you've  never  heard  of. 

Gracenote,  a  digital  entertainment  com¬ 
pany,  says  that  it  will  offer  a  product  for  online 
music  stores  by  midyear  that  will  help  the  stores  make 
smarter  music  recommendations  for  their  customers. 
And  a  project  partially  funded  by  the  European  Union 
is  ready  to  license  similar  technologies  to  service 
providers  and  consumer  electronics  makers. 


Early  efforts  at  recommending  music  relied  on 
signal  processing  techniques  to  uncover  similarities 
in  music,  such  as  sound  quality,  according  to  Xavier 
Serra,  who  is  managing  the  E.U. -funded  Semantic 
Interaction  with  Music  Audio  Contents  (SIMAC) 
project  at  Barcelona’s  Pompeu  Fabra  University. 
That  was  enough  to  group  tunes  with  the  same 
acoustic  properties,  but  the  method  might  still  have 
linked  a  fast-paced  classical  overture  with  a  thump¬ 
ing  techno  beat. 

The  next  generation  of  the  technology  will  com¬ 
bine  signal  processing  with  information  from  data¬ 
bases  containing  input  from  music  experts,  or  even 
personal  data  supplied  by  a  consumer. 

-James  Niccotai 
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Closing  Open-Source 
Patent  Loopholes  __ 

licensing  The  Free  Software  Foundation  (FSF)  has  released  a  draft  version 
of  its  new  general  public  software  license  (GPL)  that  is  designed  in  part  to  protect 
open-source  users  from  being  sued  over  software  patents. 

The  document  (available  at  http://gplv3.fsf.org/draft)  is  the  first  major  revision 
to  the  popular  software  license  in  15  years  and  would  change  the  terms  under  which 
a  variety  of  open-source  software,  including  Linux,  Samba  and  MySQL,  is  used.  The 
GPL  is  a  license  that  allows  users  to  freely  copy  software  as  long  as  they  share  any 
modifications  they  make  to  it. 

The  draft  includes  a  provision  requiring  software  distributors  to  “shield”  users 
against  patent  infringement  claims  when  they  distribute  software  that  incorporates 
patented  technology.  The  provision  is  aimed  at  discouraging  patent  infringement 
suits  and  preventing  users  from  being  hurt  in  intellectual  property  disputes,  such 
as  the  dueling  lawsuits  between  SCO  and  IBM.  The  two  companies  contested 
who  owns  the  rights  to  Linux  and  Unix,  and  some  Linux  users  were  caught  up  in 
the  litigation. 

The  patent  provision  is  likely  to  kick  off  a  lot  of  discussion,  especially  from 
large  companies  with  lots  of  patents  that  may  wonder  exactly  what  they  must  do 
to  protect  users,  says  Karen  Copenhaver,  general  counsel  with  intellectual  property 
management  vendor  Black  Duck  Software.  Linus  Torvalds,  developer  of  the  Linux 
kernel,  a  key  component  of  the  Linux  operating  system,  says  he'll  oppose  the  new 
license  for  another  reason:  its  rejection  of  digital  rights  management. 

Eben  Moglen,  one  of  the  authors  of  the  draft,  predicts  that  the  new  license  will 
"most  likely”  be  finalized  in  early  2007. 


-Robert  McMillan 


INTERNET 


China's  Online  Millions 

A  big  target  for  U.S.  companies 


Chinese  Internet  users 
in  2005 

111  million 

Broadband  users 

64  million 

Names  registered  with 
China’s  “.cn”  domain 

1  million 
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New  Orleans 

Continued  from  Page  15 

ware,  mapping  software,  survey  systems 
and  audience  response  tools— to  engage 
residents  in  community  redevelopment 
programs.  "The  tools  help  people  see  where 
their  communities  are  heading  now  and 
decide  what  they  want  to  see  happen  in  the 
future,”  he  says. 

Similar  tools  were  used  to  facilitate  dis¬ 
cussions  at  the  APA-sponsored  Louisiana 
Recovery  and  Rebuilding  Conference  last 
November,  with  the  help  of  AmericaSpeaks, 
a  nonprofit  that  collected  New  Yorkers’  ideas 
for  rebuilding  Lower  Manhattan  after  9/11. 
Then,  nearly  5,000  Manhattan  residents 
participated  in  an  event  called  "Listen  to  the 
City.”  The  residents  broke  into  groups  for 
discussions  about  policy,  resource  allocation 
and  planning  concerns.  Each  group  used 
wireless  computers  to  submit  ideas,  and 
each  participant  could  vote  on  specific 
proposals  using  a  polling  keypad.  The  large 
group  then  responded  to  the  strongest 
themes  generated  from  the  discussions  and 
voted  on  final  recommendations.  As  a  result, 
the  New  York  Port  Authority  (one  of  the 
agencies  responsible  forthe  rebuilding 
plans)  realized  that  its  key  assumption— 
the  amount  of  office  space  to  be  included  in 
the  plan— was  off  base,  says  Joe  Goldman, 
a  senior  associate  with  AmericaSpeaks. 

During  the  Louisiana  conference,  150  civic 
leaders,  educators  and  health-care  providers 
from  areas  affected  by  Katrina  contributed 
their  goals  for  rebuilding.  Evan  Paul,  a  pro¬ 
gram  associate  with  AmericaSpeaks,  says 
this  input  was  incorporated  into  a  set  of  prin¬ 
ciples  that  are  guiding  regional  redevelop¬ 
ment  efforts.  The  group  is  working  with  New 
Orleans  planning  groups  to  incorporate  addi¬ 
tional  citizen  participation  as  redevelopment 
moves  forward. 

Goldman  says  technology  brings  citizens 
back  into  a  process  in  which  they’ve  lost 
faith.  “The  way  that  cities  are  planned 
defines  people’s  lives,”  Goldman  explains. 
"We  have  found  that  by  providing  a  signifi¬ 
cant  portion  of  the  public  with  a  real  voice 
in  early  decision  making,  it  is  possible  to 
generate  substantial  buy-in  to  the  process 
and  consensus  on  plans  and  policies  for 
moving  forward,”  he  says. 

-Stephanie  Overby 
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Hank  not  only  counts  on  the  most  complete,  secure  network  of  the  new  AT&T, 
he  turns  to  the  AT&T  BusinessDirect®  online  command  center  for  answers. 
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VoIP  and  Wi-Fi 
Where  There  Are 
No  Telephones 


digital  divide  What  do  you  get  when 
you  cross  a  laptop  with  a  bicycle?  Mobile  Internet. 

No  joke.  The  nonprofit  company  Inveneo 
has  developed  a  low-energy,  Linux-based 
computer  that  is  powered  by  bicycle  and  solar 
energy.  The  technology  was  designed  to  bring 
Internet  and  voice  over  IP  (VoIP)  to  poor  vil¬ 
lages  in  rural  areas  of  Africa  and  Asia. 

In  2003,  Inveneo  cofounders  Mark  Summer 
and  Robert  Marsh  developed  a  wireless  system 
for  villagers  in  rural  Laos  while  volunteering  for 
a  nongovernmental  organization  there.  The  duo 
wanted  to  use  this  technology  to  bring  local, 
national  and  international  dialingto  other 
remote  areas.  Last  year,  they  teamed  up  with  a 
group  named  ActionAid  and  began  working 
with  villages  in  western  Uganda,  where  the 
nearest  phone  is  a  three-  or  four-kilometer  walk. 

Already,  the  team  has  installed  computer 
stations  in  four  isolated  villages  in  the 
Bukuuku  region  of  Uganda,  serving  a  total  of 
nearly  3,200  villagers.  Each  computer  is  wired 
to  an  analog  telephone  and  a  Wi-Fi  antenna, 
which  transmits  the  Internet  signal  to  a  central 
hub  at  one  of  the  villages.  The  Inveneo  system 
costs  $1,995,  according  to  Summer.  It  comes 
with  80-watt  solar  panels  and  an  optional 
bicycle-powered  generator  that  can  provide 
power  when  there  isn’t  any  sunlight. 

Some  farmers  are  using  VoIP  to  call  friends 
in  larger  cities  and  obtain  market  prices  for 
produce  before  deciding  whether  the  trek 
to  town  is  worth  it,  says  Kristin  Peterson, 
Inveneo's  chief  marketing  officer. 

The  technology  has  attracted  attention  from 
big-name  IT  companies  such  as  Intel  and  Wyse 
Technologies.  Peterson  says  Inveneo  will  use 
support  and  nonmonetary  contributions  from 
these  companies  to  expand  its  work  to  other 
parts  of  the  world.  Next  on  the  company’s  list: 
Other  regions  of  Uganda,  as  well  as  additional 
countries  in  Sub-Saharan  Africa.  -Matt  Villano 


Most  Companies 
Adopti  ng 
ITIL  Practices 


management  report  The  Information  Technology  Infrastructure 
Library  (ITIL),  a  set  of  best  practices  in  IT  management,  is  helping  companies 
align  IT  with  their  larger  business  objectives,  according  to  a  recent  survey  by 
consultancy  Evergreen  Systems. 

Of  167  CIOs  and  other  senior  IT  executives  who  participated  in  the  survey, 

95  percent  said  they  had  budgeted  for  or  approved  ITIL  projects  during  2005,  and 


85  percent  said  their  ITIL  plans  included  business  goals  as  well  as  technical  prior¬ 
ities.  In  addition,  87  percent  said  that  their  companies  have  a  CIO  or  senior  VP 
committed  to  these  projects. 

ITIL  adoption  is  rising  as  involvement  of  IT  executives  increases,  says  Don 
Casson,  CEO  of  Evergreen  Systems.  This  isn't  a  surprise,  he  says,  because 
“ITIL  is  about  processes,  so  you’d  [expect]  the  first  people  to  grab  hold  of  it 
would  be  IT  executives."  He  says  successful 
implementations  occur  only  when  the  CIO  is 
involved  from  day  one. 

First  developed  in  the  late  1980s  by  the  British 
government,  ITIL  is  a  seven-volume  catalog  of 
best  IT  practices.  It  covers  major  aspects  of  IT 
operations,  including  service  support,  delivery 
and  management;  security,  infrastructure  and 
application  management;  and  business  align¬ 
ment.  (For  more  about  how  CIOs  are  implement¬ 
ing  ITIL,  read  “ITIL  Power,"  www.c/o.com/090105.) 

European  companies  have  widely  embraced 
all  of  the  practice  areas.  But  in  the  United 
States,  organizations  are  most  interested  in 
service  support  and  delivery.  The  survey  found 
that  46  percent  of  respondents,  a  plurality,  said 

they  are  using  ITIL  for  reengineering  IT  services  _ 

and  delivery.  Thirty-one  percent  are  adopting 

every  aspect  of  ITIL,  while  19  percent  are  focused  on  improving  management  of 
services  such  as  the  help  desk. 

Although  it’s  critical  that  a  CIO  get  involved  at  the  beginning  of  an  ITIL 
implementation,  Casson  says  companies  should  proceed  with  it  at  their  own 
pace.  Close  to  70  percent  of  respondents  said  they  set  strategic  goals  and  ROI 
targets  for  each  phase  of  adoption. 

"This  is  a  large,  multiyear  enterprise  change,"  says  Casson.  “That’s  a  terrific 
risk.  [But]  one  of  the  benefits  of  it  is  that  it  can  be  done  in  a  serial  fashion.  You  can 
capture  value  from  reasonably  short  phases.”  -C.G.  Lynch 


TOP 
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ITIL 

1  Improve  service 
quality 

2  Increase 
business/IT 
alignment 

3  Become  more 
efficient 

SOURCE:  Evergreen  Systems 
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LINUX® 


Fujitsu  PRIMEQUEST™  Servers  with  Intel®  Itanium®  2  Processors . 

Mainframe  Reliability .  Sited  for  the  Mainstream . 


For  decades,  CIOs  have  trusted 
Fujitsu  mainframes  to  run  their  mission- 
critical  applications.  Now  you  can 
get  the  same  robust  engineering  and 
innovative  design  with  the  highly  reliable, 
high  performance  Fujitsu  PRIMEQUEST 
servers  featuring  Intel®  Itanium®  2  Processors. 
Designed  for  Microsoft®  Windows®  and 
Linux®  environments  to  run  mission  critical 


System  Mirror 

PRIMEQUEST  servers  offer  the  ability  to  run 
memory  and  crossbars  as  mirrored  pairs.  This 
option,  enabled  via  the  Dual  Synchronous 
Architecture  in  PRIMEQUEST  servers,  provides 
fault  immunity  for  the  hosted  operating  system 
and  applications.  The  use  of  System  Mirror 
transparently  guards  against  hardware  errors 
that  could  otherwise  cause  a  system  panic. 


applications,  PRIMEQUEST  servers 
harness  the  power  and  performance 
of  up  to  32  Intel®  Itanium®  2  Processors, 
to  easily  accommodate  your  largest 
applications.They  are  designed  with  integrated 
networking  and  management  features  for 
simplicity  and  offer  flexible  I/O  and  partitioning 
that  enhances  your  agility  to  respond  to 
dynamic  business  requirements. 


To  learn  more  about  how  Fujitsu  PRIMEQUEST  servers  bring  mainframe  reliability  to  mainstream  environments, 


visitus.fujitsu.com/computers/PRIMEQUEST  or  call  1-800-83  1-3 1 83 


FUJITSU 

THE  POSSIBILITIES  ARE  INFINITE 


©  2006  Fujitsu  Computer  Systems  Corporation.  All  rights  reserved.  Fujitsu,  the  Fujitsu  logo  and  PRIMEQUEST  are  trademarks  or  registered  trademarks  of  Fujitsu  Limited  m  the  United  State*  and  other 
countries.  Intel.  Intel  Inside,  Itanium,  Itanium  Inside,  the  Intel  iogo  and  the  Intel  inside  logo  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  <ts  susidianes  in  the  United  States  and  other 
countries..  Microsoft  and  Windows  are  registered  trademarks  or  trademarks  of  Microsoft  Corp.  in  the  United  States  and/or  other  countries.  Linux  is  the  registered  trademark  of  Linus Torvaids  in  the  US. 

and  other  countries.  All  other  trademarks  mentioned  herein  are  the  property  of  their  respective  owners. 
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Government  Kisses  wm*. 

More  IT  Work  Goodbye 


outsourcing  The  federal  government  is  expected 
to  outsource  $17.6  billion  in  IT  work  by  2010,  an  increase  of 
more  than  $4  billion  over  last  year,  according  to  a  recent 
report  by  market  research  company  Input. 

The  projected  increase  in  outsourcing  is  being  driven 
primarily  by  the  Office  of  Management  and  Budget’s  lines- 
of-business  initiative,  according  to  the  report.  The  govern¬ 
ment’s  lines  of  business  include  financial  management,  IT 
security  and  grants  management,  among  others.  Govern¬ 
ment  agencies  will  have  to  apply  to  OMB  to  become  Centers 
of  Excellence  for  a  specific  business  function,  and  only  agen¬ 
cies  that  receive  that  designation  will  be  deemed  qualified  to 
perform  that  function. 

Agencies  not  designated  as  Centers  of  Excellence  will 
have  to  transfer  their  function  to  a  Center  of  Excellence  once 
the  systems  that  support  that  particular  function  (such  as 
financial  management  systems)  reach  the  end  of  their  life¬ 


cycle.  The  Centers 
of  Excellence  will 
then  compete  with  out¬ 
sourcing  vendors  for  the  oppor¬ 
tunity  to  provide  management  services, 
though  OMB  has  been  tight-lipped  about  how  the  competi¬ 
tions  will  be  organized. 

“Generally  speaking,  the  business  challenges  and 
market  factors  driving  the  decision  to  outsource  are  similar 
between  the  private  and  public  sectors,”  says  Chris  Camp¬ 
bell,  senior  analyst  for  federal  market  analysis  with  Input. 
“Most  often,  outsourcing  is  prompted  by  the  need  to  supple¬ 
ment  internal  technical  resources,  reduce  cost,  infuse  new 
technology,  or  standardize  and  streamline  operations.”  In 
the  case  of  the  federal  government,  the  war  in  Iraq,  budget 
deficits  and  shrinking  agency  budgets  are  driving  outsourc¬ 
ing  decisions,  Campbell  says.  -A l  Sacco 


Wanted:  Business  Process 


ON  THE  MOVE 

More  and  more  CIOs  are 
assuming  responsibility  for 
business  process  improve¬ 
ment.  Paul  Groce,  who 
heads  the  CIO  practice  for 
executive  recruiting  firm 
Christian  &  Timbers,  says 
this  is  because  such  proj¬ 
ects  “almost  always”  involve 
the  CIO's  team.  “Most  any 
process  improvement  in 
2006  is  designed  to  take 
advantage  of  technology 
capabilities.  As  businesses 
apply  technology,  they  have 
to  change  their  processes  in 
order  to  be  able  to  best 
leverage  those  technolo¬ 
gies,"  he  says. 

CIOs  have  the  right  back¬ 


ground  to  take  on  business 
process  improvement.  Busi¬ 
ness  process  improvement 
initiatives  require  project 
and  change  management 
expertise  as  well  as  an 
understanding  of  technol¬ 
ogy,  says  Groce.  Any  CIO 
worth  her  salt  has  all  of 
those  qualifications. 

Amongthose  CIOs  who 
were  hired  in  the  past  six 
months  for  their  business 
process  experience  are  Joe 
Lindsay,  the  new  CIO  with 
mortgage  provider  Secured 
Funding;  William  Lutz,  VP  of 
IT  with  Orchid  Cellmark,  a 
provider  of  DNA  testing 
services;  Larry  Grotte,  now 
CIO  with  MTC  Holdings;  and 


Alan  Boehme,  who  joined 
Juniper  Networks  as  its 
new  CIO. 

Secured  Funding  named 
Lindsay  in  January.  He  is  in 
charge  of  automating  the 
Costa  Mesa,  Calif.-based 
company’s  entire  loan 
process.  In  his  last  job,  as 
president  and  CTO  of  QS 
Labs,  Lindsay  was  responsi¬ 
ble  for  building  compliance 
process  management  solu¬ 
tions  for  the  life  sciences 
industries. 

At  Orchid  Cellmark,  Lutz 
is  working  with  laboratory 
directors  to  implement  new 
software  and  processes  that 
will  automate  and  stream¬ 
line  the  Princeton,  N.J.- 


Experts 

based  company’s  DNA  test¬ 
ing  operations. 

MTC  Holdings  tasked 
Grotte,  its  first-ever  CIO, 
with  making  the  company's 
IT  department  focus  more 
on  business  processes,  and 
with  helpingthe terminal 
operator’s  business  units 
implement  more  effective 
business  processes. 

Juniper  Networks  hired 
Boehme  in  part  because  of 
his  ability  to  transform 
global  business  processes, 
as  proven  in  his  work  for 
previous  employers,  which 
include  Best  Software,  GE 
and  the  logistics  company 
DHL. 

-Meridith  Levinson 


cio.com 


Read  Meridith  Levinson’s  MOVERS  AND  SHAKERS  blog  for  the  latest  moves.  Find  it  at  www.cio.com/blogs, 
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UNLOCK  THE  VALUE  HIDDEN 
WITHIN  YOUR  ENTERPRISE. 


Inefficient  business  processes,  slow  product  development,  fragmented  customer 
data-these  are  just  a  few  signs  that  your  enterprise  has  hidden  opportunities  for 
increasing  customer  and  shareholder  value.  That’s  where  we  can  help. 

We're  Tata  Consultancy  Services,  TCS,  creator  of  the  Global  Delivery  Model  for  software 
development.  For  over  35  years  TCS  has  been  the  provider  of  choice  for  hundreds  of 
clients  around  the  globe  seeking  to  improve  business  performance  through  superior  IT 
consulting  and  outsourcing  solutions.  Whether  it’s  increasing  supply  chain  efficiency, 
elevating  customer  service  or  improving  speed  to  market— we’ve  helped  some  of  the  best 
companies  in  the  world  become  even  better. 

Let  TCS  help  you  unlock  hidden  value  in  your  enterprise.  For  a  more  complete 
introduction,  email  marketing@usa-tcs.com  or  visit  TCS  online  at  www.tcs.com. 
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Microsoft 


gfGETTHE  FACTS. 


SWITCHING  FROM  RED  HAT  LINUX  TO  WINDOWS  SERVER  WILL  SAVE 
TOMMY  HILFIGER  AN  ESTIMATED  25-30%  IN  IT  COSTS. 


"Our  migration  to  Windows  Server™  will  reduce  our  IT  costs  by  an  estimated  25-30 
percent,  but  that's  only  the  start.  Our  efforts  are  improving  our  competitive  advantage. 
We  developed  a  full  e-commerce  site  within  six  months,  in  time  for  the  2005  holidays, 
and  we'll  continue  to  benefit  from  compressed  product  design  times  and  an 
optimized  supply  chain."  -Eric  Singleton,  CIO  TONMY3  HILFIGER 

For  these  and  other  third-party  findings,  go  to  microsoft.com/getthefacts 


Microsoft® 


Windows 
Server  System 


SYMPOSIUM  &  AWARDS  CEREMONY 


The  Eighth  Annual 
CIO  100  Symposium  &  Awards 


Delivering  Innovation  to  the  Enterprise 


CIO  100  Symposium  is  the  premier  place  for  CIOs  to  exchange  ideas  with  their  peers  across 
all  industry  segments  as  noted  thought  mavens  and  recognized  leaders  in  the  CIO  community 
explore  how  to  develop,  implement  and  capitalize  on  innovation  most  effectively. 


Save  the  date. 

August  20  -  22,  2006 

Hotel  Del  Coronado,  Coronado,  California 


For  more  information,  call  800-355-0246 


CIO  100  Symposium  Awards  are  proudly  underwritten  by 
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VISUALIZE  INNOVATE.  DELIVER1' 
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Business  Technology  Leadership 
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Late  to  the  Internet  Party, 
Media  Mogul  Predicts  Triumph 


■  • .  -f 

’  • :  ilk 


•  4 

Ur.  T.'  .  .wm 


online  media  Portals  like  those 
from  Yahoo  and  Microsoft  will  fade  in  pop¬ 
ularity  as  savvy  users  go  directly  to  the 
content  they  want  to  view,  publishing  titan 
Rupert  Murdoch  predicts. 

"Young  people  today— who  are  the  great 
users  of  the  Internet— know  exactly  what 
sites  they  want  to  go  to,  and  they  go  there,” 
Murdoch  said  at  a  Citibank  media  investor 
conference  in  January.  “They  don’t  have  to 
go  and  work  their  way  through  Yahoo’s 
homepage  or  MSN's  or  someone  else’s.” 

The  News  Corp.  chairman’s  prediction 
comes  as  the  company  plunges  into  online 
media  after  several  years  of  sitting  on  the 
sidelines.  He  acknowledged  criticism  that  his 
company  was  late  to  invest  in  the  Internet, 
and  said  flat  revenue  from  the  company’s 
traditional  print  media  has  been  a  wake-up 
call.  Online  media  brands  are  in  competition 
with  content  portals  such  as  Yahoo,  MSN  and 


Google  for  advertising  revenue. 

News  Corp.  bolstered  its 
online  holdings  last  year  with 
several  acquisitions.  It  bought 

IGN  Entertainment,  which  ran  _ 

a  network  of  websites  for  gam¬ 
ing  enthusiasts,  as  well  as  Intermix  Media, 
which  ran  the  social  networking  site 
MySpace.com  and  Scout  Media,  a  pub¬ 
lisher  of  websites  and  sports  magazines. 

The  acquisitions  increased  News  Corp.’s 
online  readership,  and  Murdoch  said  his 
content  has  the  third  highest  number  of 
paid  views  in  the  United  States,  behind 
Yahoo  and  MSN  but  ahead  of  Google  and 
eBay.  He  projected  that  News  Corp.’s  main 
websites  will  have  revenue  of  $350  million 
to  $400  million  by  2007. 

Among  Murdoch’s  online  plans  are 
to  improve  MySpace.com  by  making  it 
“stickier,"  he  said.  The  site  has  begun 


Rupert 

Murdoch 


offering  free  video  downloads  and  is 
developing  instant  messaging  technology 
and  voice  communication  capability. 
MySpace.com  has  about  47  million  users, 
representing  a  gold  mine  of  data  for  tar¬ 
geted  advertising,  according  to  Murdoch. 
The  site  is  growing  by  about  1  million  users 
per  week,  he  said. 

MySpace.com  will  not  be  a  traditional 
portal,  centered  on  organizing  content  for 
users,  Murdoch  said.  Rather,  his  company 
is  bullish  on  building  community,  offering 
an  online  space  where  users  can  create 
connections  to  friends,  colleagues  and 
their  preferred  content.  -Jeremy  Kirk 
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Depend  on  BLTs 
Color  Printer  Line  Of  The  Year. 


ricoh-usa.com/itchamel 


Buyer's  Laboratory  Inc.  performed  three  months  of 
rigorous  testing  of  the  leading  color  printers.  Ricoh's 
color  printer  line  proved  to  be  the  best  of  the  best. 
Let  Ricoh  dependability  move  your  ideas  forward. 


RICOH 
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Susan  Cramm  executive  coach 


|  Survivor:  The  Organization 

Does  it  really  help  you  to  vote  people  off  your  IT  island?  Isn't  there  a  better  way 
to  build  a  staff  of  top  performers?  In  fact,  there  is. 


As  you  review  your  organization’s  bench  strength, 
the  bottom  of  the  bell  curve  is  bugging  you.  A 
small  percentage  of  employees  just  aren’t  cutting 
it.  Once  upon  a  time,  most  of  them  were  highly 
rated  and,  as  a  result,  they’re  sitting  in  big  jobs.  But  you’re  los¬ 
ing  confidence  in  them,  and  they’re  losing  confidence  in  them¬ 
selves.  They’re  becoming  defensive  or  going  underground. 

It’s  natural  to  blame  them.  After  all,  their  performance  is 
affecting  yours,  and  their  previous  contributions  are  fading 
in  light  of  current  challenges.  Many  organizations  practice  an 
extreme  form  of  the  “blame  the  employee”  game  by  using  an 
up-or-out  approach  to  management  development.  In  the  up- 
or-out  process  (typically  done  once  a  year  as  part  of  organi¬ 
zational  planning),  managers  are  asked  to  chart  out  their 
organizational  needs  for  the  future,  assess  their  staff’s  current 
capabilities,  and  identify  the  top  and  bottom  10  percent  that 
should  move  “up”  or  move  “out.”  As  a  result  of  this  process, 
people  get  promoted,  reassigned,  hired  and  “managed  out” 
(read:  fired  without  an  ensuing  lawsuit). 

In  so-called  high-performance  organizations,  executives 
follow  this  process  dutifully,  with  the  understanding  that 
their  ability  to  manage  out  that  bottom  10  percent  is  part  of 
their  job,  albeit  an  unpleasant  one.  This  ongoing  “Survivor: 
The  Organization”  game  results  in  a  corporate  “kill  or  be 
killed”  mentality.  The  up-or-out  process  provides  an  easy 
road  for  managers  who  would  rather  focus  on  the  low- 
hanging  fruit  of  structure  and  talent  assessment  and  defer 
more  difficult  decisions  regarding  strategy  and  career  devel¬ 
opment.  In  many  organizations,  organizational  planning  has 
been  reduced  to  endless  hours  spent  tinkering  with  org  charts 
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INTRODUCING  POSTINI  INTEGRATED  MESSAGE  MANAGEMENT"' 


The  corporate  messaging  landscape  is  changing.  New  threats  from  Instant  Messaging,  new 
requirements  for  message  archiving  and  compliance,  more  diverse  user  needs — all  demand  better 
solutions  for  securing  your  electronic  communications.  Introducing  Postini  Integrated  Message 
Management.  One  comprehensive,  flexible,  trusted  managed  service  that  protects  your  messages 
without  burdening  your  IT  infrastructure. 


TO  LEARN  MORE,  DOWNLOAD  A  FREE  WHITE  PAPER,  “SECURING  YOUR  ELECTRONIC  COMMUNICATIONS  WITH 
INTEGRATED  MESSAGE  MANAGEMENT,”  AT  WWW.P0STINI.C0M/CI02,  OR  CALL  US  AT  888.584.3150. 


Susan  Cramm  executive  coach 
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(in  the  vain  hope  that  some  sort  of  a  Suduko-type  answer 
will  emerge)  and  gossiping  about  others’  capabilities  and 
potential  (albeit  in  an  organizationally  sanctioned  manner). 

Why  Up-or-Out  Doesn’t  Work 

Up-or-out  is  a  ruthless,  Darwinian  approach  that,  very 
often,  simply  doesn’t  work  because  it  ignores  two  key  real¬ 
ities.  First,  it  assumes  that  if  there  is  a  performance  issue 
it’s  due  to  the  shortcomings  of  the  individual.  In  my  expe¬ 
rience,  most  individual  performance  issues  are  really  man¬ 
agement  performance  issues  in  disguise.  Second,  up-or-out 
assumes  that  the  devil  you  don’t  know  is  better  than  the 
devil  you  do.  In  reality,  hiring  someone  from  the  outside  is 
difficult,  expensive  and  typically  results  in  trading  one 
set  of  problems  for  another. 

Try,  instead,  to  entertain  the  idea  that  you  have  most  of 
the  right  people  right  now,  and  spend  your  time  assigning 
them  to  roles  that  they  1.  want  to  do,  2.  know  how  to  do,  and 
3.  in  which  they  know  what  to  do.  You  can  do  this  by: 

■  Defining  the  strategy  collaboratively.  People  will 
know  what  to  do  if  they’re  involved  in  the  development  of 
objectives,  strategies  and  tactics.  Only  within  a  shared 
strategic  context  can  individuals  apply  their  experience, 
knowledge  and  social  skills  in  a  productive,  collaborative 
fashion.  Good  talent  can  go  bad  when  it’s  assigned  to  an  ini¬ 
tiative  that  is  ill-conceived  and  unsupported  by  others. 

■  Understanding  your  people.  People  are  born  with 
inherent  talents  and  the  drive  to  do  the  best  they  can  in 
order  to  feel  good  and  significant.  Many  times,  performance 
issues  crop  up  when  an  individual’s  values,  motivators  and 
talents  don’t  jibe  with  the  job  they  are  assigned.  People  will 
perform  best  if  their  role  connects  with  what  makes  them 
tick  and  leverages  and  enhances  their  strengths. 

■  Providing  support.  No  one  has  a  complete  package  of  tal¬ 
ents,  skills  and  knowledge,  and  most  are  unaware  of  their  rel¬ 
ative  strengths  and  deficiencies— especially  when  it  comes  to 
taking  on  a  new  challenge.  Managers  can  help  people  learn 
how  to  do  their  jobs  by  providing  them  with  the  resources  and 
support  (oversight,  coaching,  education,  colleagues,  tools) 
that  supplement  and  complement  their  abilities. 

■  Clarifying  processes  and  roles.  Managers  can  also 
help  ensure  that  their  people  know  how  to  do  their  jobs  by 
designing  processes  that  clearly  define  their  accountabil¬ 
ities  and  how  their  work  relates  to  others.  In  organiza¬ 
tional  design,  it’s  important  to  design  processes  and  roles 
before  addressing  staffing  questions. 

Wise  leaders  understand  that  many  a  prince  has  been 
made  to  look  like  a  pig  when  faced  with  challenges  that  are 
outside  of  their  control  due  to  strategic  misalignment,  orga¬ 
nizational  chaos  and  role  misfits.  Before  you  decide  that  a 
person  just  can’t  cut  it,  take  a  hard  look  in  the  mirror  and 
make  sure  you  have  set  them  up  for  success,  not  failure. 


Reader  Q&A 

Q:  Jack  Welch  may  not  have  been  the  first  to  use  up-or-out 
but  he  certainly  popularized  it  and  was  lionized  for  employ¬ 
ing  it.  But  did  it  really  work  for  him  and  for  GE?  Or  was  that 
just  hype? 

A:  Up-or-out  has  been  misused  by  less  mature  companies 
in  their  misguided  attempt  at  focusing  on  best  practices 
rather  than  appropriate  practices.  If  all  companies  could 
sustain  the  growth  and  build  the  HR  competence  that 
GE  has,  up-or-out  would  not  be  a  business  problem  (only 
a  problem  of  conscience). 

Up-or-out  cannot  exist  without  growth  because  with¬ 
out  growth,  there  is  no  up. 

GE  developed  a  set  of  HR  policies  that  ensure  that  up- 
or-out  is  supported  by  clear  performance  expectations, 
frequent  performance  reviews,  candid  feedback  and 
management  accountability  for  talent  development. 

In  the  words  of  a  former  GE  employee,  “When  the 
organization  holds  the  manager  accountable  for  talent 
development— and  in  fact  judges  and  financially  rewards 
a  manager  by  how  many  new  leaders  she  produces— 
then  you  can  mix  in  a  higher  desired  turnover  rate  and 
mitigate  some  of  the  downsides.” 


Q:  What  can  one  do  about  the  employee  who  even  after 
being  given  fresh  challenges  and  help  with  direction  and 
organization,  continues  to  make  costly  mistakes,  mistakes 
that  threaten  to  lower  morale  and  impede  efficiency?  When 
is  enough,  enough? 

A:  It’s  enough  when  you  have  assumed  50  percent  of  the 
responsibility  for  the  issue  and  you’ve  done  all  that  you  can 
to  understand  the  employee’s  motivations,  values  and 

abilities,  and,  fur- 
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thermore,  you  have 
placed  him  in  a  role 
that  he’s  well  suited 
for  and  is  excited 
about.  The  truth  is, 
some  people  just 
aren’t  in  the  right  company,  in  the  right  place,  and  you  do 
them  a  favor  by  helping  them  figure  this  out  as  soon  as 
possible  so  that  they  can  move  on.  If  you  do  the  career 
development  and  counseling  right,  they  will  realize  that 
they  don’t  fit,  leave  on  their  own  and  thank  you  on  their 
way  out  of  the  door,  ram 


Susan  Cramm  is  founder  and  president  of  Val- 
uedance,  an  executive  coaching  firm  in  San 
Clemente,  Calif.  You  can  e-mail  feedback  to 
susan@valuedance.com. 
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Move  Over,  Baby  Boomers 


Gen  X-ers  want  far  more  collaboration  with  companies— both  as  customers  and  as 
employees.  CIOs  are  uniquely  positioned  to  help  their  enterprises  meet  the  demands 
of  this  new  technology-savvy  generation. 


]ast  July,  I  had  the  honor  of  speaking  on  CRM  and 
sports  at  the  annual  offsite  conference  of  Comcast 
¥  Spectacor  (the  owners  of  the  Philadelphia  Flyers 
’  S  and  76ers,  among  other  franchises).  The  offsite  was 
attended  by  250  enthusiastic  employees,  of  which  about  240 
were  35  and  under.  No  exaggeration.  Two  months  prior,  I 
went  to  Croatia  to  keynote  that  country’s  first-ever  CRM  con¬ 
ference.  There  were  about  165  attendees,  roughly  80  percent 
of  whom  were  40  and  under. 

This  youthful  phenomenon  transcends  the  anecdotal. 
Gen  X,  those  born  between  1961  and  1982,  are  just  beginning 
to  enter  business  leadership  en  masse.  In  the  United  States, 
there  are  approximately  132  million  combined  Gen  X-ers  and 
Gen  Y-ers— a.k.a.  echo  boomers— as  opposed  to  nearly 
79  million  baby  boomers.  The  youngest  echo  boomer  is  16 
years  old— of  age  to  be  a  consumer  with  money  to  spend.  The 
oldest  Gen  X-er  is  43  years  old— and  poised  to  take  those  lead¬ 
ership  positions  coming  available  as  baby  boomers  step  down. 

These  new  generations  think  differently  and  want  signif¬ 
icantly  different  things  out  of  life  than  previous  generations. 
And  they  are  demanding  new  business  models  to  give  them 
the  kinds  of  customer  experiences  they  seek.  What  do  they 
mean  by  a  great  experience?  They  desire  enough  visibility  into 
companies  they  deal  with  to  enable  them  to  make  smart 
choices  easily  through  many  means  of  communication. 

There  is  a  reason  why  Samsung  Electronics  has  passed 
Sony  as  the  leader  in  consumer  electronics.  In  my  opinion, 
Sony  developers  are  a  cloistered  group  of  engineering  monks. 
Samsung  spends  a  lot  of  time,  energy  and  dollars  on  working 
with  its  customers  through  advisory  boards  that  help  deter- 


3  0 


MARCH  1,  2006  |  www.cio.com 


ILLUSTRATION  BY  PHIL  WHEELER 


Business  Risk 


Technology  Risk 


Internal  Audit 


WE’VE  FIGURED  OUT 

HOW  TO 

STEAL 

MILLIONS  FROM 
FORTUNE  IOOO  COMPANIES. 


Of  course,  they  were 
really  asking  for  it. 

Like  the  client  that 
challenged  us  to  break  into 
their  network  and  steal  $50 
million.  The  bad  news:  We 
found  three  ways  to  do  it. 

The  good  news:  We  quietly 
and  efficiently  helped  them 
eliminate  those  vulnerabilities.  Today,  that 
company  proudly  advertises  the  safekeeping 
of  their  assets.  No  matter  what  industry 
you’re  in,  Protiviti  can  help  you  identify  and 
prioritize  your  IT  security  risks.  Address  your 


exposure  before  it  becomes 
a  problem.  And  monitor  your 
risks  going  forward.  This  can 
create  a  competitive  advantage. 
Our  security  experts  have  an 
exhaustive  knowledge  of  the 
latest  technologies  and  detection 
software,  and  can  apply  that 
knowledge  objectively  to  even 
the  most  complex  IT  environments.  So  let  us  take 
a  crack  at  your  network.  Because  if  we  can’t  steal 
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mine  its  next  lines  of  consumer  products.  Samsung’s  approach 
is  a  harbinger  of  what  happens  when  a  business  model  is  based 
on  real  collaboration  between  companies  and  their  customers. 

This  is  no  trivial  matter.  If  your  company  doesn’t  develop  a 
new  business  model  that  provides  this  kind  of  proactive  col¬ 
laboration  between  you  and  your  customers,  then  these  new 
consumers  will  simply  take  their  business  elsewhere.  The 
CIOs  willing  to  figure  out  how  to  make  these  new  models  work 
in  the  context  of  their  own  businesses  will  be  well  positioned 
to  flourish  in  this  era.  Those  who  don’t  will  be  toast. 

Who  Are  These  Gen  X-ers? 

But  don’t  take  my  word  for  it.  Let’s  look  at  what  the  research 
shows.  According  to  generational  consultant  Claire  Raines  in 
her  book  Beyond  Generation  X,  Gen  X-ers  grew  up  with  both 
parents  working,  so  they  became  self-reliant— the  “latchkey 
generation.”  They  desire  to  control  their  own  destinies  and 
their  own  experiences.  You  can  see  this  in  the  incessant  adver¬ 
tising  aimed  at  “lifestyle”  choices.  These  ads  attempt  to  sell 
not  a  particular  product  or  service,  but  the  experience  con¬ 
sumers  might  have  using  a  particular  product  or  service.  Prod¬ 
ucts  and  services  are  now  being  sold  as  lifestyle  solutions  by 
companies  that  understand  the  deeply  rooted  desire  of  these 
new  consumers  to  control  what  kind  of  lives  they  have. 

As  customers,  Gen  X-ers  and  Gen  Y-ers  are  more  volatile  and 
high-maintenance  than  any  other  generation  in  history.  They 
are  voracious  in  their  desire  for  immediate  information  and 
have  sophisticated  behavioral  approaches  to  filtering  that 
information,  no  matter  how  many  sources  it  comes  from. 

In  a  recent  study,  for  example,  Yankelovitch  found  that 
63  percent  of  this  group  will  research  products  before  they 
consider  a  purchase.  What  makes  this  statistic  even  more  com¬ 


pelling  is  that  these  new  customers  are  creating  extensive 
communities  to  exchange  information.  Even  though  nary  a 
handshake  occurs,  the  information  swap  is  trusted— and  thus 
is  more  powerful  than  any  marketing  pitch  ever  could  be.  As 
Christopher  Locke,  Doc  Searls  and  David  Weinberger  said  in 
1999’s  foresighted  book  The  Cluetrain  Manifesto,  “When  we 
have  questions,  we  turn  to  each  other  for  answers.” 

Want  an  example?  Have  you  seen  Epinions.com?  If  you  go 
there,  you’ll  see  reviews  of  tens  of  thousands  of  products  by  per¬ 
haps  millions  of  people,  all  of  whom  are  personally  interacting 
to  provide  more  information  about  the  products  and  services 
than  even  the  creators  of  those  products  can  provide.  The  “wis¬ 
dom  of  the  masses”  helps  people  know  whom  to  trust  and 
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why  to  trust  (or  not  trust)  them.  These  exchanges  are  instan¬ 
taneous,  real-time  and  decisive. 

For  business  tools  such  as  CRM  to  be  considered  viable  for 
this  new  generation,  a  dramatic  facelift  is  in  order.  Traditional 
CRM  is  no  longer  suited  to  the  business  ecosystem  that  we 
now  live  in.  That’s  because  the  customer  is  at  the  hub  of  this 
new  ecosystem,  not  the  corporation.  Traditional  CRM  organ¬ 
ized  internal  processes  and  key  performance  indicators  around 
providing  a  presumed  value  to  the  customer.  But  the  cus¬ 
tomers  themselves  were  usually  not  consulted,  nor  did  com¬ 
panies  consider  the  actual  value  of  these  changes  from  their 
customers’  perspectives. 

In  contrast,  the  new  generation  of  CRM  tools  must  involve 
the  customer  in  the  planning  of  business  processes.  Skype  is 
an  example  of  a  company  that  gets  this.  By  engaging  with  its 
customers  as  participants,  primarily  through  Internet  “word 
of  mouse,”  Skype  fostered  more  than  238  million  downloads 
(and  counting)  of  its  VoIP  technology,  which  provides  the  com¬ 
pany  with  a  customer  base  of  roughly  54  million  users.  Skype 
worked  with  online  communities  such  as  the  Public  Mind  to 
gather  up  user-suggested  features,  and  then  adopted  those 
features  that  the  users  wanted  and  that  were  also  profitable. 
Skype’s  new  business  model  has  been  so  successful  that  the 
company  was  recently  acquired  by  eBay  for  $2.6  billion. 

“Collaborative  customer  experiences”  are  the  watchwords 
of  the  new  CRM  model.  That  means  that  a  relationship  between 
company  and  customer  provides  customers  with  transparency 
into  corporate  thinking,  which  enables  the  two  parties  to  craft 
the  customer  experience  jointly.  Today,  running  a  successful 
business  is  no  longer  a  matter  of  producing  better  products  and 
services,  whether  or  not  the  customer  requests  them;  CRM 
should  be  organized  around  providing  a  significantly  posi¬ 
tive  customer  experience.  Since  millions  of  cus¬ 
tomers  can’t  each  get  personal  attention,  the 
company  must  enable  its  customer  to  craft  her 
own  experience.  So,  in  the  current  primitive 
stage  of  the  customer  ecosystem,  we  see  BMW 
providing  what  can  be  defined  as  an  innovation 
toolkit— a  set  of  Web-based  templates  that  aid 
BMW  owners  in  thinking  through  ideas  that  they  want  to  see 
in  future  models.  This  toolkit  has  led  to  13  consumer-driven 
designs  involving  online  services  in  cars  a  la  OnStar  that  will 
be  unveiled  in  forthcoming  BMW  models. 

CRM  is  even  more  important  in  this  new  era  because  the  cus¬ 
tomer  defines  the  value,  rather  than  the  corporation.  The 
PC/video  game  industry  understands  this.  Many  of  these  game 
companies  release  their  game  engines  and  authoring  tools  to 
the  public  so  that  game  modifications  can  be  made  by  con¬ 
sumers  for  every  aspect  of  the  game,  from  the  interactions  to 
the  graphics.  This  has  spawned  what  is  called  the  “mod  com¬ 
munity”  where  hundreds  of  thousands  of  Gen  X-ers  and  Gen 
Y-ers  participate  in  creating  entirely  personalized  versions  of 


Traditional  CRM  is  no  longer 
suited  to  the  business  ecosystem 
that  we  currently  live  in. 


any  game.  For  example,  a  company  called  Valve  Software 
released  the  game  engine  that  it  used  to  develop  the  highly 
popular  sci-fi  game  Half  Life.  Consumers  then  used  this 
engine  to  create  a  new  game  known  as  CounterStrike,  which 
didn’t  resemble  its  parent  at  all.  The  game  became  so  wildly 
popular  as  a  freely  downloaded  “mod”  that  Valve  acquired  the 
team  of  young  adults  who  created  it  and  commercialized  Coun¬ 
terStrike.  The  result?  Millions  of  units  sold,  30,000  servers  ded¬ 
icated,  85,000  people  playing  any  given  second  in  a  24/7  week 
totaling  4.5  billion  minutes  per  month,  and  many  of  the  users 
paying  monthly  fees  to  play  this  incredible  user-created  game. 
It’s  no  coincidence  that  revenue  for  the  gaming  industry  was 
projected  by  PricewaterhouseCoopers  to  be  more  than  $25  bil¬ 
lion  in  2004  and  $55  billion  by  2009. 

To  retain  customers  and  fully  realize  their  value,  companies 
will  have  to  restructure  their  entire  value  chain— encompass¬ 
ing  sales,  marketing,  customer  service,  delivery,  logistics  and 
supply  chain.  To  paraphrase  Hillary  Clinton,  “it  takes  a  village” 
to  please  a  single  customer.  And  that  means  a  no-mistakes 
experience  along  the  entire  value  chain.  Research  shows  that 
companies  that  make  customers  their  focus  can  generate 
greater  revenue  and  higher  profit  margins. 

A  note  of  interest:  The  architecture  that  supports  the  new 
customer  experience  is  much  more  akin  to  the  on-demand 


architecture  as  represented  by  companies  like  Salesforce.com, 
NetSuite  and  RightNow  because  of  its  “multichannel,  any¬ 
time,  anywhere”  availability  and  ease  of  use.  The  willingness 
of  the  on-demand  vendors  to  provide  the  code  needed  to 
develop  valuable  additional  applications  and  extensions  to 
the  original  services  they  provide  (see  the  AppsExchange  web¬ 
site  from  Salesforce.com,  for  example)  gives  the  new  generation 
a  more  flexible  set  of  tools  to  work  with  in  providing  cus¬ 
tomized  services. 

This  profound  shift  creates  enormous  opportunities  for  CIOs. 
The  business  models  and  tools  that  will  allow  the  technology- 
savvy  Gen  X-ers  and  Gen  Y-ers  to  control  their  own  experi¬ 
ences  have  to  be  created  one  company  at  a  time.  CIOs  can 
reassert  their  strategic  role  by  explaining  this  new  direction 
to  other  C-level  executives  and  then  working  with  them  to  pro¬ 
vide  the  tools  this  new  breed  of  customers  so  determinedly 
wants.  This  will  be  a  challenge,  but  a  necessary  one  if  your 
company  is  to  stay  alive  in  the  coming  years.  And  you,  as  the 
CIO,  are  one  of  the  best-equipped  executives  to 
get  the  ball  rolling.  00 


Paul  Greenberg  is  president  of  The  56  Group  and  the 
author  of  the  best-selling  CRM  at  the  Speed  of  Light. 
He  can  be  reached  at  paul-greenberg3@comcast.net. 
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Disaster  Recovery 


MIT  logistics  expert 

talks 

with  CIO  about  what 
companies  can  do 
to  recover  quickly 
from  almost  any  type 
of  disaster 


BY  SUSANNAH  PATTON 


When  the  South  "lower 

of  the  World  Trade  Center  collapsed  on  Deutsche 
Bank’s  New  York  facility,  the  German  banking  giant 
lost  its  connection  to  the  U.S.  markets.  Almost 
immediately,  however,  backup  systems  in  Ireland 
kicked  in,  and  Deutsche  Bank  went  on  to  clear 
more  than  $300  billion  in  transactions  that 
same  day. 


After  the  September  11th  attacks,  and  more  recently  hurricanes  Katrina 
and  Rita,  companies  such  as  Deutsche  Bank  have  been  able  to  bounce  back 
because  they  planned  for  the  unthinkable.  Yossi  Sheffi,  director  of  MIT's  Center 
for  Transportation  and  Logistics,  calls  these  organizations  “resilient." 

In  his  recent  book,  The  Resilient  Enterprise,  Sheffi  says  companies  and  gov¬ 
ernment  agencies  need  to  take  a  systematic  approach  to  disaster  planning.  (To 
read  an  excerpt  from  his  book,  go  to  www.cio. com/030106.)  The  list  of  things 
that  can  go  wrong  is  endless,  especially  in  this  age  of  supply  chains  that  stretch 
around  the  globe,  leaving  companies  vulnerable  to  strikes,  natural  disasters 
and  civil  unrest  far  from  home  base.  Companies  need  to  start  cataloging  what 
could  go  wrong,  but  they  also  need  to  examine  their  cultures  to  make  sure 
theirs  is  resilient.  Companies  that  recover  in  the  face  of  devastation  are  those 
with  redundant  systems,  but  they  also  empower  all  levels  of  employees  and 
create  a  sense  of  passion  for  work,  Sheffi  says.  Company  cultures  that  promote 
resiliency  should  be  equipped  to  respond  to  almost  any  disaster. 

Building  redundant  IT  systems  is  most  important  for  technology-intensive 
industries  such  as  financial  services.  But  even  universities  and  other  orga¬ 
nizations  with  less  pressing  need  for  immediate  backup  should  evaluate  which 

types  of  data  are  most  crucial  to 
their  daily  operations.  It’s  a  simple 
equation,  Sheffi  says.  “It’s  better 
to  pay  something  now,  than  to 
possibly  lose  your  business  in  the 
future,”  he  says.  Sheffi  recently 
spoke  with  CIO  about  what  makes 
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Disaster  Recovery 


companies  resilient  and  how  CIOs  can 
build  a  case  for  a  comprehensive  plan  to 
keep  IT  systems  up  and  running  when  the 
unthinkable  strikes  again. 

CIO:  Several  recent  disasters  have 
shown  that  companies  and  their  IT  lead¬ 
ers  need  to  be  prepared  for  the  unknown. 
What  have  we  learned,  for  instance,  from 
Hurricane  Katrina? 

Yossi  Sheffi:  We’ve  learned  that  the  fates 
of  companies  and  government  agencies  are 
sealed  before  the  disaster  hits.  Organiza¬ 
tions  that  get  ready  perform  well;  those 
that  don’t  prepare  don’t  do  well. 

Just  look  at  FEM  A.  They  were  hiring  peo¬ 
ple  with  no  qualifications,  and  they  had  not 
set  up  adequate  communication  systems. 
This  was  happening  for  years.  And  New 
Orleans  had  not  responded  to  warnings 
three  days  before  the  storm  hit.  On  the  flip 
side,  we  should  look  at  Wal-Mart  and  Home 


sound  like  a  lot  of  chatter,  but  everyone  is 
listening  intently  so  they  can  react  imme¬ 
diately  if  something  goes  wrong. 

Another  factor  is  empowerment.  At  Toy¬ 
ota,  for  example,  every  worker  can  pull  a 
cord  and  stop  production  if  they  see  a  qual¬ 
ity  problem.  If  they  pull  it,  the  line  stops 
and  a  team  of  engineers  descend  to  see  what 
is  going  wrong  instead  of  just  letting  the 
line  keep  working.  This  is  an  effort  to  pre¬ 
vent  the  making  of  bad  cars.  The  same  thing 
happens  on  a  Navy  carrier,  where  every 
sailor  on  deck  has  the  right  and  responsi¬ 
bility  to  stop  flight  operations  if  they  see  a 
problem  developing.  This  is  amazing 
because  you’re  talking  about  what  could  be 
a  19-year-old  with  one  year  of  training  hav¬ 
ing  the  right  to  stop  a  multibillion-dollar 
ship  with  6,000  highly  trained  sailors  on 
deck.  In  disasters,  it’s  clear  that  you  have  to 
react  immediately,  and  it’s  possible  that  one 
sailor  could  see  it  coming. 


lWe  need  redundancy 
in  ail  the  supporting  infrastructure, 
not  just  the  backup  of  the  actual 
data.” 


Depot,  which  responded  quickly.  They  have 
both  spent  years  building  up  their  emer¬ 
gency  room  and  communications  systems 
so  they  can  respond  to  any  natural  disas¬ 
ter.  These  companies  are  able  to  change 
course  when  conditions  change  abruptly. 

What  should  companies  be  doing  right 
now  to  emulate  Wal-Mart  and  Home 
Depot? 

They  need  to  look  at  company  culture. 
There  is  something  in  the  DNA  of  resilient 
companies  that  is  missing  from  those  that 
falter  and  suffer.  It  goes  beyond  just  redun¬ 
dancy.  First  of  all,  communication  is  key, 
and  I’ve  found  that  resilient  companies 
communicate  obsessively.  The  U.S.  Navy  is 
a  good  example.  On  aircraft  carriers,  there 
are  lots  of  so-called  listening  networks  that 
allow  lots  of  people  to  listen  to  communi¬ 
cation  between  pilots,  the  tower  and  the 
landing  signal  officers  and  others.  It  may 


The  third  characteristic  of  good  culture 
is  a  passion  for  work.  Navy  sailors,  for 
example,  don’t  think  about  their  job  as 
driving  big  ships,  they  think  of  their  job  as 
defending  freedom. 

How  has  globalization  made  companies 
and  their  IT  systems  more  vulnerable 
when  disaster  hits? 

Globalization  of  the  supply  chain  is  still 
marching  on  because  labor  costs  are  so  low 
in  places  like  China.  But  this  trend  stretches 
the  supply  chain  across  the  globe  and  makes 
companies  vulnerable.  Lead  times  are 
longer,  and  a  lot  can  happen  in  the  mean¬ 
time.  It  takes  six  to  eight  weeks  to  go  over  the 
ocean  and  during  that  time,  demand  can 
change.  And,  more  importantly,  risks  such 
as  theft  and  counterfeiting  rise.  Also,  many 
regimes  are  unstable,  and  there  are  unpre¬ 
dictable  events  such  as  strikes  and  terror¬ 
ism.  All  of  this  creates  a  more  brittle  supply 
chain.  When  something  goes  down  and  the 
transportation  link  breaks,  the  product  is 
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just  not  available. 

There  are  ways  to  protect  yourself,  how¬ 
ever.  When  it  comes  to  IT,  the  need  for 
redundancy  is  obvious.  The  cost  of  an  infor¬ 
mation  technology  outage  to  a  major  corpo¬ 
ration  from  floods,  terrorism  or  whatever,  is 
huge.  It  can  put  the  company  out  of  busi¬ 
ness.  But  the  cost  of  backup  and  redundancy 
in  IT  is  relatively  low,  especially  when  you 
compare  it  to  having  a  redundant  manu¬ 
facturing  plant. 

Is  there  a  difference  between  redundancy 
and  mere  backup? 

Redundancy  is  more  than  the  backup  of 
data.  Redundancy  may  require,  for  example, 
the  ability  to  get  more  hardware  in  the  event 
of  a  disaster.  You  need  an  agreement  with 
Dell  or  HP  or  anyone  else  to  get  the  equip¬ 
ment  and  make  sure  that  you  have  the 
capacity,  power  and  other  infrastructure  to 
handle  the  data.  For  example,  during  9/11, 
Merrill  Lynch  not  only  had  backup  of  all  its 
data  and  transactions,  it  had  shadow  trading 
floors  already  set  up  in  New  Jersey.  When 
the  exchange  reopened,  Merrill  Lynch  was 
trading.  They  were  up  and  running  even 
though  they  were  in  the  South  Tower  when 
the  airplane  hit.  We  need  redundancy  in  all 
the  supporting  infrastructure,  not  just  the 
backup  of  the  actual  data. 

It’s  interesting  to  look  at  Cantor  Fitzger- 
ald  as  well.  They  were  the  largest  bond 
trader  in  the  world,  and  they  lost  657 
employees  on  9/11.  A  lot  of  people  thought 
they’d  never  survive  because  it’s  a  very  rela¬ 
tionship-based  business.  But  from  the  IT 
perspective  they  were  able  to  recover 
because  all  their  data  was  backed  up.  Even 
with  their  infrastructure  gone,  they  had 
Microsoft  come  in  and  recover  their  lost  pass¬ 
words  and  get  their  operating  system  back  on 
line.  A  competitor  let  Cantor  Fitzgerald  use 
its  systems  while  Texas  Instruments  rebuilt 
their  infrastructure.  They  were  able  to 
recover  because  they  had  been  backing  up 
their  data  in  real-time. 

It’s  clear  that  IT-intensive  companies  like 
Cantor  Fitzgerald  and  Merrill  Lynch  need 
a  lot  of  redundancy  and  backup.  But  for 
other  companies,  it  may  not  be  as  clear. 
How  does  a  company  decide  how  much 
redundancy  it  needs  for  its  IT  systems? 
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_THE  INVASION 

_DAY  11:  These  commoditized  clones  have  taken  over. 
Haven’t  been  outside  in  days.  Living  off  instant 
coffee  and  a  tin  of  breath  mints.  :-( 

_DAY  12:  They’re  breeding.  Multiplying.  Multiple 
apps.  Multiple  databases.  They  must  have  a  queen. 

_Help. . . me . . . . 
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Disaster  Recovery 


Any  large  company  will  need  a  minimum, 
such  as  daily  backup.  But  then  the  ques¬ 
tion  becomes,  what  happens  if  they  lose 
one  day’s  worth  of  transactions?  For  some 
companies  it  won’t  matter.  It’s  not  a  com¬ 
pany  question  though,  it’s  a  nature  of  the 
data  question.  At  a  university,  for  example, 
there  are  few  items  that  need  continuous 
backup.  When  they  are  doing  financial 
transactions  with  a  vendor,  buying  and  sell¬ 
ing  supplies  and  equipment,  they  might 


need  that  backup.  But  other  data,  such  as 
student  information  and  research  material, 
doesn’t  change  that  often;  so  if  you  do  it 
nightly,  it  may  be  fine. 

How  should  a  CIO  make  a  business  case 
for  their  CFOs  to  invest  in  redundant  IT 
systems?  Do  you  have  an  example? 

The  more  a  CIO  can  tie  redundancy  to  the 
regular  business,  the  more  chance  he  or 
she  will  get  money  for  it.  You’ll  need  to  go 
through  what  could  happen  if  you  go  down 
in  the  same  way  you  justify  paying  an 
insurance  premium.  You’ll  also  want  to 
look  at  it  as  an  ongoing  process  of  evaluat¬ 
ing  the  risks  you’re  facing.  By  building  flex¬ 
ibility  into  any  operation,  you  can  respond 
better  to  market  changes.  The  best  way  to 
do  this  is  to  build  in  redundancy  that  can 
help  the  business  even  before  disaster 
strikes.  For  example,  when  you  buy  desktop 
computers,  don’t  throw  the  old  ones  out- 
keep  them  as  excess  capacity.  CIOs  have  to 
think  about  how  to  help  the  main  vision  of 
the  business,  which  is  to  be  profitable  and 
increase  the  stock  price.  Having  this  redun¬ 
dancy  on  the  IT  side  not  only  gives  us  insur¬ 
ance  but  also  the  flexibility  to  handle  surges 
in  demand  when  necessary. 

OK,  but  what  happens  if  you're  really  try¬ 
ing  to  cut  costs  in  IT? 

This  is  the  big  problem.  Let’s  say  you  get  pre¬ 


pared,  and  in  the  best  of  all  worlds,  nothing 
happens.  The  CEO  asks,  ‘why  are  we  wasting 
this  money?’  You’ve  got  to  try  to  prove  your 
point  through  benchmarking.  It’s  hard  to  do 
because  people  don’t  get  promoted  based 
on  cost  avoidance.  It  doesn’t  show  any¬ 
where  in  the  books.  All  managers,  not  just 
CIOs,  face  this.  You  can  benchmark  against 
leaders  in  the  industry  and  present  the  con¬ 
sequences  of  not  doing  this.  At  the  end,  it’s 
a  management  decision. 


Are  some  people  investing  too  much  in 
redundancy? 

No,  because  the  pressure  to  cut  costs  is  so 
intense  that  you  don’t  see  companies  over¬ 
doing  it.  Individuals  may  overinsure  and 
buy  unnecessary  warranties.  But  most  cor¬ 
porations  tend  not  to  do  it. 

What’s  the  best  way  to  figure  out  the  main 
risks  for  your  company? 

You  want  to  have  a  brainstorm  of  all  things 
that  could  go  wrong  and  then  plot  them  on  a 
probability  versus  severity  axis.  Some  events 
are  very  likely  but  don’t  threaten  the  sur¬ 
vival  of  the  company.  For  example,  demand 
for  a  product  is  lower  or  higher  than  we 
thought  or  a  truck  has  an  accident.  Some 
other  potential  disasters  require  more  central 
planning,  but  aren’t  likely  to  happen,  such  as 
9/11,  Katrina  or  the  Exxon  Valdez  oil  spill,  a 
strike,  or  a  failure  of  the  information  system. 
All  these  things  require  the  company  to 
develop  redundancy  even  if  the  probability 
is  low.  You’ll  have  to  plan  for  what  you’ll  do 
because  you’ll  also  have  fear  among  employ¬ 
ees  and  customers,  and  the  government  may 
overreact.  Even  after  9/11,  most  of  the  eco¬ 
nomic  damage  came  from  the  closing  of  our 
borders,  not  the  actual  attacks.  Ford  lost 
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13  percent  of  its  fourth  quarter  production 
in  2001.  They  had  convoys  of  trucks  with 
parts  coming  from  Canada  and  Mexico  that 
couldn’t  get  into  the  country.  When  foot  and 
mouth  disease  hit  in  England,  the  govern¬ 
ment  closed  farms  and  culled  livestock.  To 
show  they  were  in  control,  they  also  closed 
the  countryside  to  tourists.  Damage  was 
2.5  times  larger  to  the  tourism  industry  than 
to  the  agriculture  industry. 

The  truth  is,  you’re  never  sure  you  are 
prepared  for  the  right  thing.  But  if  you  build 
in  some  redundancy  or  flexibility,  it  doesn’t 
matter  if  it’s  a  hurricane,  an  earthquake  or 
a  strike.  You’ll  be  ready  for  anything  regard¬ 
less  of  the  problem. 

What's  the  one  thing  that's  keeping  CIOs 
up  at  night  right  now? 

First  of  all,  we  are  still  in  the  era  of  IT  viruses, 
which  is  an  ongoing  battle.  Aside  from  that, 
IT  and  all  the  other  functions  are  tied 
together.  If  the  computers  are  down,  the  sup¬ 
ply  chain  won’t  move.  And  if  we  can’t  buy  the 
material  [from  suppliers],  there  is  nothing  to 
sell.  Companies  that  do  risk  management 
well  usually  do  it  with  cross-functional 
teams.  In  many  cases  the  CIO  is  leading  the 
group  because  the  impact  of  losing  IT  infra¬ 
structure  could  be  so  severe. 

But  it  goes  beyond  that.  I  just  talked  to 
Procter  &  Gamble,  for  example.  Their  Fol- 
gers  plant  in  New  Orleans  got  flooded  after  the 
hurricane.  But  their  problem  was  not  the 
plant— they  knew  how  to  get  it  up  and  run¬ 
ning  again.  Their  problem  was  they  didn’t 
have  electricity,  water  or  workers.  So  they 
dug  a  well  to  get  water  to  the  plant.  And,  in 
general,  they  have  expanded  the  way  they  do 
risk  profiles  to  include  not  only  IT  systems, 
which  may  go  down,  but  also  the  support  sys¬ 
tem  outside  of  the  plant.  Companies  have  to 
expand  the  way  they  look  at  disaster  plan¬ 
ning  and  start  looking  beyond  their  own  facil¬ 
ities  to  the  greater  ecosystem  around  them. 

The  truth  is,  you’re  never  sure  you  are 
prepared  for  the  right  thing.  But  if  you  build 
in  some  redundancy  or  flexibility,  it  doesn’t 
matter  if  it’s  a  hurricane,  an  earthquake  or  a 
strike.  You’ll  be  ready  for  anything  regardless 
of  the  problem.  HEJ 


Senior  Writer  Susannah  Patton  can  be  reached  at 
spatton@cio.com. 


“If  you  build  in  some 
redundancy  or  flexibility,  you’ll  be 
ready  for  anything  regardless  of  the 
problem.” 
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/  have  control,  i  have  a  new  IBM  System  i5. 


i  control  complexity.  The  one-of-a-kind  System  i5  is  server, 
storage,  software,  database,  and  security,  all  in  one. 

i  control  reliability.  The  System  i5  platform  helps  keep  you  up 
and  running  so  you  can  focus  on  your  business,  not  your  I.  T. 

i  control  flexibility.  This  uniquely  customizable  platform  lets 
you  run  multiple  operating  systems  ( Windows *  Linux ,®  AIX 5L ™ 
and  i5/0S *)  simultaneously 


i  control  my  I.T.  destiny.  IBM  Systems  are  a  range  of  innovative 
servers  and  storage  -  like  the  System  i5  -  designed  to  make  your 
infrastructure  and  your  life  simpler. 


IBM.COM/TAKEBACKCONTROL/i5 


‘Requires  IXS  or  IXA  to  run  Windows.  Linux,  Microsoft  Windows  and  AIX  5L  operating  systems  must  be  purchased  separately.  IBM,  AIX  5L,  System  i5,  i5/OS,  and  Take  Back  Control  are  trademarks  or 
registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Linux  is  a  trademark  of  Linus  Ton/aids  in  the  United  States,  other  countries,  or  both. 
Microsoft  and  Windows  are  trademarks  of  Microsoft  Corporation  in  the  United  States,  other  countries,  or  both.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others. 
©2006  IBM  Corporation.  All  rights  reserved. 
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SUPPLY  CHAIN 

The  government  wants  you  to  secure  your  supply 
chain.  Right  now,  its  program  is  voluntary.  It  won’t 
stay  that  way  for  long.  And  the  responsibility  for 
collecting  the  data  Uncle  Sam  wants  is  going  to 
fall  on— you  guessed  it— the  CIO.  by  ben  worthen 

BETWEEN  2002  AND  2005,  THE  DEPARTMENT  OF  HOMELAND  SECURITY 

spent  $75  million  to  track  several  companies’  cargo  containers  coming  into  the  seaports  of 
Seattle/Tacoma,  Los  Angeles/Long  Beach,  and  New  York/New  Jersey.  The  project,  called 
Operation  Safe  Commerce,  used  GPS  technology  and  radio  frequency  identification  to  monitor 
cargo  from  a  handful  of  major  importers  (including  Sara  Lee  and  Motorola)  as  it  made  its  way 
from  overseas  factories  to  its  final  destination  in  the  United  States. 

The  goal  of  Operation  Safe  Commerce  was  to  identify  weak  links  in  the  global  supply 
chain.  A  report  summarizing  its  findings  was  due  more  than  a  year  ago,  in  February  2005. 
To  date,  for  a  variety  of  reasons,  no  report  has  been  released.  But  sources  close  to  the  project 
have  told  CIO  that  Operation  Safe  Commerce  revealed 
that  companies  actually  know  very  little  about  what 
goes  on  in  their  supply  chains. 

Among  common  unsafe  practices  identified  by  these 
sources  were:  truckers  dropping  off  containers  without 
ever  encountering  terminal  security,  containers  left  in 
unsecured  areas,  and  containers  bypassing  a  port  that’s 
considered  safe  (even  if  scheduled  to  pass  through  that 
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port)  and  traveling  instead  through  a  coun¬ 
try  that  poses  a  greater  threat— without 
either  the  company  or  U.S.  Customs  and 
Border  Protection  being  informed. 

According  to  Steve  Schellenberg,  a  sen¬ 
ior  consultant  at  the  trade  advisement  com¬ 
pany  IMS  Worldwide  who  worked  on 
Operation  Safe  Commerce  for  the  port  of 
Seattle,  the  project  “showed  us  that  there 
needs  to  be  a  quantum  leap  in  the  informa¬ 
tion  we  possess  about  the  supply  chain.” 

Companies  will  have  to  find  a  way  to 


tor  of  global  customs  for  General  Motors. 
“This  is  an  inevitability.” 

THE  NIGHTMARE  SCENARIO: 
WHEN,  NOT  IF 

Right  now,  information  about  any  given 
supply  chain  is  hard  to  come  by.  And  that’s 
by  design.  The  goal  of  supply  chains  is  to  get 
something  that’s  needed— a  part,  a  prod¬ 
uct— to  where  it’s  needed  as  quickly  and 
cheaply  as  possible.  If  a  container  arrives 
too  late  to  be  loaded  onto  one  ship,  it’s 


inspected.  An  October  2002  war  game  that 
mimicked  that  scenario  found  that  closing 
the  nation’s  ports  for  as  many  as  12  days 
created  a  60-day  container  backlog  and  cost 
the  economy  roughly  $58  billion.  “Any  inci¬ 
dent  would  shut  down  commerce,”  Sen. 
Patty  Murray  of  Washington  told  CIO. 
Murray  is  the  ranking  member  of  the  Sen¬ 
ate  Appropriations  Committee  Subcom¬ 
mittee  on  Transportation,  Treasury,  the 
Judiciary,  Housing  and  Urban  Develop¬ 
ment  and  Related  Agencies. 


“A  huge  number  of  containers  come  into  our  country’ —about  9  million 
a  year.  “Right  now,  we  don’t  know  what’s  in  them,  who’s  handled  them, 

if  they’ve  been  opened.”  -Washington  Sen.  Patty  Murray 


make  that  leap— possibly  within  the  next 
year— because  soon  the  government  will 
make  sharing  this  information  a  cost  of 
doing  business  for  every  company  that 
engages  in  international  commerce. 

The  mechanism  for  the  government’s  ini¬ 
tiative  is  already  in  place:  the  Customs- 
Trade  Partnership  Against  Terrorism,  or 
C-TPAT,  which  requires  that  companies 
take  responsibility  for  the  security  of  their 
supply  chains.  C-TPAT  is  currently  volun¬ 
tary,  but  program  members  say  that  the 
benefits  of  compliance— which  include 
reduced  wait  time  at  borders  and  fewer 
inspections— will  make  participation  an 
unavoidable  cost  of  doing  business. 

“There’s  really  very  little  that  Customs 
can  do  to  speed  things  up,”  says  Schellen¬ 
berg.  “But  they  can  sure  as  heck  slow  you 
down.” 

Furthermore,  members  of  the  trade  com¬ 
munity  believe  that  the  government  will 
eventually  make  C-TPAT  participation 
mandatory,  although  a  spokesman  for  Cus¬ 
toms  disputes  that. 

CIOs  need  to  begin  preparing  now,  or 
they  could  find  themselves  facing  a  massive 
last-minute  hurry-up,  comparable  to  their 
Sarbanes-Oxley  travails,  if  they  don’t  want 
to  watch  their  company’s  containers  get 
held  up  at  Customs  while  their  competi¬ 
tors’  crates  sail  through. 

“There’s  no  doubt  that  this  is  going  to 
happen,”  says  Kevin  Smith,  general  direc- 


rerouted  and  loaded  onto  another.  And  as 
long  as  the  container  arrives  on  time— or 
close  to  it— no  one  need  be  the  wiser.  In  fact, 
historically,  each  person  or  entity  that  han¬ 
dles  a  shipment  collects  and  shares  infor¬ 
mation  only  to  the  extent  necessary  to 
guard  against  liability. 

Similarly,  Customs  was  created  to 
enforce  tariffs  and  calculate  import  taxes. 
And  while  Customs’  role  expanded  to  com¬ 
bat  drug  trafficking  in  the  1980s,  regulating 
trade  was  the  department’s  primary  job 
until  September  11, 2001.  Now,  says  Robert 
Bonner,  former  commissioner  of  U.S.  Cus¬ 
toms  and  Border  Protection  (he  resigned 
in  November),  “The  priority  mission  of  U.S. 
Customs  is  national  security.” 

Experts  say  that  Bonner,  who  was  sworn 
in  at  Customs  on  Sept.  24, 2001,  was  right  to 
change  the  agency’s  focus.  Most  agree  that 
the  likelihood  of  terrorists  attacking  the 
United  States  through  the  global  supply 
chain  is  so  high  that  it’s  a  matter  of  when,  not 
if.  Such  an  attack  (most  analyses  focus  on  a 
dirty  bomb)  won’t  primarily  be  designed  to 
kill  a  lot  of  people,  but  to  cause  panic.  “It 
isn’t  the  event  but  the  sudden  lack  of  faith  in 
the  system  that  it  causes,”  says  Stephen 
Flynn,  senior  fellow  for  national  security 
studies  at  the  Council  on  Foreign  Relations. 

If  a  bomb  goes  off,  Flynn  says,  there  will 
be  huge  pressure  on  the  government  to 
close  all  the  nation’s  ports  until  every  con¬ 
tainer  on  every  site  in  the  country  is 


SECURING  THE  SUPPLY  CHAIN: 
SOX  AND  C-TPAT 

Customs  has  developed  a  two-pronged  strat¬ 
egy  to  prevent  the  dirty-bomb  scenario.  First, 
it’s  asking  companies  to  assume  responsi¬ 
bility  for  their  supply  chain  security. 

Legally,  a  company  is  responsible  for  a 
container  only  when  it  formally  purchases 
it,  which— precisely  for  that  reason— usu¬ 
ally  doesn’t  occur  until  it  reaches  a  port, 
either  in  the  United  States  or  abroad.  Tar¬ 
get,  for  example,  typically  does  not  legally 
purchase  the  clothes  it  orders  from  China 
until  they  arrive  in  the  terminal.  But  the 
government  wants  importers  to  take 
responsibility  for  everything  that  occurs 
prior  to  purchase,  even  if  the  container  is  in 
the  custody  of  a  trucker  in  China  or  a  long¬ 
shoreman  in  Rio  de  Janeiro.  The  principle 
vehicle  for  this  is  C-TPAT.  This  so-far  vol¬ 
untary  program  gives  certain  benefits,  such 
as  reduced  inspections,  to  companies  that 
can  show  they  meet  a  minimum  level  of 
supply  chain  security.  The  better  a  com¬ 
pany’s  security  (as  judged  by  Customs  audi¬ 
tors),  the  more  benefits  it  receives.  There 
are  currently  three  tiers  of  C-TPAT  com¬ 
pliance,  and  containers  belonging  to  mem¬ 
bers  in  the  top  tier  sail  through  Customs 
virtually  uninspected. 

If  C-TPAT  is  the  carrot,  then  the  Sar- 
banes-Oxley  Act  (Sox)— which  requires  that 
companies  put  in  place  reasonable  safe¬ 
guards  against  events  that  could  materi- 
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Managing  the  Terror  Risk 

Should  Customs  focus  on  preventing  an  attack 
or  responding  to  one? 

THE  DRIVING  FORCE  BEHIND  the  Customs-Trade  Part¬ 
nership  Against  Terrorism  (C-TPAT)  is  the  idea  that  it  is 
possible  for  private  companies  to  risk-manage  for  a  one¬ 
time  terrorist  event.  With  the  right  information  about  the  supply 
chain  and  the  full  cooperation  of  companies,  it  will  be  possible  to 
prevent  a  terrorist  attack,  argues  former  U.S.  Customs  and  Border 
Protection  Commissioner  Robert  Bonner. 

But  Stephen  Flynn,  a  national  security  expert  with  the  Council 
on  Foreign  Relations,  says  that  the  private  sector  doesn’t  design 
security  systems  to  prevent  events.  Instead,  companies  set  up  trip 
wires  at  vulnerable  points  and  wait  until  they  detect  an  intrusion. 
Then  they  respond. 

“No  one  has  failproof  security,"  says  Flynn.  "I  can  give  a  truck 
driver  more  money  than  he  will  ever  see  again  in  his  life  and  tell 
him  he  needs  to  go  to  lunch  for  three  hours.” 

While  Flynn  thinks  that  C-TPAT  is  a  good  program,  he  believes 
it  should  only  be  part  of  a  broader  solution.  Instead  of  focusing 
solely  on  preventing  an  attack,  he  argues  that  Customs  should  be 
planning  how  to  respond  and  recover  from  an  attack.  Flynn  advo- 


Different  approaches  to  security:  Former  U.S.  Customs  and  Border 
Protection  Commissioner  Robert  Bonner  (left)  and  Council  on 
Foreign  Relations  security  expert  Stephen  Flynn 


cates  equipping  ports  with  drive-through  X-ray,  radiation  and 
gamma  ray  scanners.  These  might  help  prevent  an  attack,  but 
more  importantly,  scanners  could  help  investigators  pinpoint  the 
exact  time  and  place  where  a  bomb  was  slipped  into  a  container. 

"A  dirty  bomb  is  a  weapon  of  mass  disruption,"  says  Flynn.  “Its 
goal  is  to  disrupt  the  system."  Knowing  exactly  where  the  weak¬ 
ness  in  the  system  is  might  allow  the  rest  of  the  system  to  carry  on 
normally  and  avoid  a  nationwide  shutdown.  -B.  W. 


ally  affect  the  company’s  value— is  the  stick. 
There’s  little  doubt,  experts  agree,  that 
events  in  the  supply  chain  fall  under  the 
Sox  umbrella.  (See  “Sox  and  the  Supply 
Chain,”  Page  44.) 

With  both  C-TPAT  and  Sox,  IT’s  job  is 
the  same:  Secure  the  data,  make  sure  that 
purchasing  and  security  have  access  to  one 
another’s  information,  and  collect  more 
data  about  what  is  happening  in  the 
extended  global  supply  chain. 

The  second  prong  of  Customs’  strategy  is 
to  collect  as  much  information  as  it  can 
about  what’s  happening  in  the  supply  chain 
so  that,  through  data  mining,  it  can  spot 
anomalies.  The  key  to  this  is  the  Automated 
Commercial  Environment,  or  ACE,  a  $3  bil¬ 
lion-plus  trade  processing  system  begun  in 
2000,  which  Customs  plans  to  complete 
by  2010.  ACE  has  modules  that  do  every¬ 
thing  from  serving  as  Customs’  ERP  sys¬ 
tem  to  targeting  containers  for  inspection. 
Within  the  next  six  months,  carriers  enter¬ 
ing  the  United  States  through  land-border 
crossings  in  seven  states  will  be  required  to 
send  close  to  100  data  elements  to  Customs, 
including  information  about  the  vehicle, 


its  driver  and  its  cargo.  If  they  don’t,  they 
don’t  get  in.  Customs  is  also  piloting  an 
ambitious  ACE  add-on  called  the  Advance 
Trade  Data  Initiative  (ATDI),  which 
requires  importers  to  share  with  Customs 
every  bit  of  information  about  a  shipment, 
including  the  purchase  order,  which  ports 
it  passes  through,  proof  of  delivery  and  its 
final  destination  within  the  United  States. 

“ATDI  will  make  companies  collect  infor¬ 
mation  that  they  haven’t  collected  before, 
share  information  they  haven’t  shared  and 
provide  information  earlier  than  they’ve 
been  required  to  provide  it  before,”  says 
GM’s  Smith.  For  example,  it’s  the  rare  com¬ 
pany  that  knows  where  on  a  ship  its  con¬ 
tainer  is  located,  but  ATDI  will  require  it. 

Eventually,  experts  say,  Customs  plans  to 
make  ATDI  participation  a  requirement  for 
tier-three  C-TPAT  certification.  (Customs 
says  that  ATDI  participation  qualifies  par¬ 
ticipants  for  tier-three  status,  but  that  it 
will  not  be  a  requirement.)  Soon,  compa¬ 
nies  that  achieve  this  level  of  compliance 
will  be  rewarded  with  a  Green  Lane  desig¬ 
nation— essentially  a  “get  out  of  Customs 
free”  card  that  will  do  for  borders  what 


E-ZPass  does  for  highways. 

“A  huge  number  of  containers  come  into 
our  country,”  says  Sen.  Murray— about  9 
million  a  year.  “Right  now,  we  don’t  know 
what’s  in  them,  who’s  handled  them,  if 
they’ve  been  opened.” 

If  the  government  gets  this  information, 
it  can  clear  most  containers  before  they 
even  reach  the  United  States.  This  will 
allow  Customs  to  focus  its  limited  resources 
on  the  containers  it  knows  the  least  about. 

As  Murray  puts  it,  “We’re  trying  to 
reduce  the  size  of  the  haystack.” 

THE  SECURE  10,000 

After  9/11  there  were  calls  by  some  mem¬ 
bers  of  Congress  to  inspect  each  and  every 
one  of  those  9  million  containers  coming 
into  the  country.  But  the  vast  majority  of 
those  containers  are  filled  with  legitimate 
goods  from  legitimate  sources  heading  to 
legitimate  companies.  “The  question  we 
faced  was.  Can  you  risk-manage  for  ter¬ 
rorism?”  says  Bonner.  “If  the  answer  is  yes, 
you  can  spot-inspect.”  (For  more  on  the 
issue  of  risk-managing  onetime  events,  see 
“Managing  the  Terror  Risk,”  this  page.) 
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Sox  and  the 

Supply  Chain 

A  bomb  in  a  box  would  have 
a  “material  impact”  on  a 
company’s  value 

SECTION  404  of  the  Sarbanes- 

Oxley  Act  (Sox)  requires  compa¬ 
nies  to  establish  controls  that 
provide  reasonable  protection  against 
preventable  events  that  could  have  an 
impact  on  a  company’s  value.  For  CIOs, 
this  meant  making  sure  that  employees 
couldn't  use  a  company’s  systems  to 
commit  acts  of  fraud.  While  the  Securities 
and  Exchange  Commission  did  not  focus 
on  it  during  the  first  year  of  Sox  compli¬ 
ance,  the  same  logic  applies:  Companies 
need  to  have  controls  that  protect  them 
against  an  adverse  event  within  a  supply 
chain.  There  are  other  sections  of  Sox 
that  indicate  that  the  supply  chain  will 
become  an  area  of  emphasis  in  the  future 
as  well.  Section  401  requires  companies  to 
account  for  risk  in  their  off-balance-sheet 
transactions,  such  as  their  supply  chains. 
And  Section  409  requires  companies  to 
report  “on  a  rapid  and  current  basis" 
events  that  could  have  a  material  impact. 
One  can  assume  that  a  bomb  in  a  cargo 
box  would  have  such  an  impact.  -B.W. 


In  July  2002,  Bonner  unveiled  C-TPAT, 
which,  by  shifting  that  burden  onto  the 
importers,  was  designed  to  reduce  the  need 
for  the  government  to  inspect  containers. 
Since  then,  over  10,000  companies  have 
applied  for  C-TPAT  membership.  In  2005 
C-TPAT  members  accounted  for  42  percent 
of  all  imports  by  volume. 

There  are  three  tiers  of  C-TPAT  mem¬ 
bership,  each  of  which  comes  with  progres¬ 
sively  fewer  inspections.  The  first  level 
simply  requires  an  attestation  that  your 
company  has  performed  a  risk  analysis  of  its 
supply  chain  and  has  taken  steps  to  miti¬ 
gate  any  vulnerabilities.  So  far,  5,757  of  these 
attestations  have  been  accepted  by  Customs. 
Tier-two  members  have  had  this  attestation 
validated  by  Customs  officials.  Right  now, 
1,511  companies  have  achieved  tier  two 


(another  2,273  validations  are  in 
progress).  Tier-three  members  are  com¬ 
panies  that  Customs  has  determined 
follow  supply  chain  security  best  prac¬ 
tices  (although  Customs  has  not  yet 
defined  any).  These  are  the  companies 
that  will  be  eligible  for  the  Green  Lane. 
Only  126  companies  to  date  have  qual¬ 
ified  for  tier  three,  including  Boeing, 
General  Motors  and  Target. 

HOW  TO  GET  YOUR  GREEN 
LANE  TICKET  PUNCHED 

Securing  your  supply  chain  data  is  the 
most  obvious  step  to  reach  at  least  tier- 
two  C-TPAT  status  (although  eventu¬ 
ally,  sources  say,  there  will  be  only  a 
tier  three;  everyone  else  will  be  treated 
the  same-poorly).  And  no  one  should 
be  surprised  that  it’s  important  to 
encrypt  and  protect  information  about 
the  schedule  and  location  of  your  ship¬ 
ments.  But  securing  supply  chain  data 
goes  beyond  that.  Importers  have  to 
attest  to  their  partners’  security.  “We 
had  an  audit  [at  a  partner’s  factory]  in 
South  Africa,  and  they  grilled  them 
about  IT  security,”  says  Jim  Wigfall, 
VP  of  supplier  management  for  Boeing 
Shared  Services.  Customs  auditors 
checked  the  partner’s  firewall,  backup 
systems  and  access  controls.  (The  com¬ 
pany  passed.)  Now  Boeing  does  the 
same  every  time  it  vets  a  potential  part¬ 
ner  against  C-TPAT  requirements. 

It’s  also  important  to  limit  access  to  sup¬ 
ply  chain  information.  “If  the  bad  guys 
know  that  IBM  is  going  to  ship  products 
from  point  A  to  B  on  a  particular  Tuesday, 
it  gives  them  a  leg  up,”  says  Debbie  Turn- 
bull,  IBM’s  program  manager  for  supply 
chain  security.  A  bad  actor  inside  a  com¬ 
pany  could  alter  the  information  attached  to 
a  container  from  Karachi,  Pakistan  (which 
might  raise  an  alarm),  so  it  looked  like  it 
was  coming  from  a  factory  in  Hong  Kong 
(which  might  not).  Or  that  bad  actor  could 
pass  scheduling  information  to  a  crony  out¬ 
side  the  company.  IBM  uncovered  one  such 
plot  a  few  years  ago.  A  worker  in  a  plant  in 
Mexico  noticed  that  one  container  he  was 
about  to  load  was  53  feet  long  on  the  out¬ 
side,  but  only  50  feet  long  on  the  inside. 
Upon  inspection,  it  was  found  that  the  con¬ 


tainer  had  a  false  back,  behind  which  was 
hidden  several  million  dollars  in  narcotics. 

While  it’s  important  to  keep  information 
about  shipments  from  people  who  don’t 
need  to  know,  it’s  equally  important  that  the 
people  who  do  need  to  know  the  details  have 
access  to  them.  For  CIOs,  this  means  inte¬ 
grating  the  systems  used  by  the  purchas¬ 
ing  and  supply  chain  organizations,  and 
making  sure  that  the  system  can  capture 
information  such  as  a  country’s  security 
profile.  The  integration  benefits  both 
departments,  says  Ron  Miller  Jr.,  Customs 
compliance  coordinator  for  P&G’s  Global 
Cross  Borders  Group.  Making  purchasing 
information  available  to  the  supply  chain 
group  allows  it  to  identify  low-risk  partners 
and  pass  that  information  on  to  Customs 
for  C-TPAT  validation.  If,  for  instance,  you 
can  show  that  something  is  a  regular  ship¬ 
ment  from  a  secure  business  partner,  it  is 
less  likely  to  be  inspected,  says  Miller. 

Similarly,  purchasing  people  need  to  have 
data  on  the  security  of  the  factories  and 
countries  to  which  they  plan  to  source.  If 
they  don’t  have  this  information,  a  cheaper 
product  may  end  up  costing  more  when 
delays  for  inspections  are  factored  in. 

“We  were  sourcing  computer  compo¬ 
nents  from  Singapore,”  says  IBM’s  Turn- 
bull.  “Someone  in  purchasing  made  the 
decision  to  source  the  same  components 
out  of  Indonesia.  The  exact  same  part  from 
Singapore,  with  no  inspection,  got  stopped 
when  it  came  from  Indonesia.”  Making  this 
information  accessible  to  both  parties 
requires  constant  updating. 

Assuring  that  your  suppliers  are  han¬ 
dling  your  cargo  in  a  secure  way  will 
require  greater  visibility  into  what  is  actu¬ 
ally  happening  in  the  supply  chain.  Some¬ 
day,  this  will  be  done  through  RFID,  smart 
containers  and  other  emerging  technolo¬ 
gies  (see  “The  Stories  Containers  Tell,”  Page 
46).  But  right  now,  many  of  these  technolo¬ 
gies  are  still  too  immature  or  expensive  to 
work  in  the  real  world.  Until  then,  compa¬ 
nies  will  need  to  integrate  systems  with 
their  overseas  suppliers  so  that  they  can 
risk-manage  the  supply  chain  by  spotting 
anomalous  activity  as  it  happens.  Even 
secure  processes  “can  be  compromised,” 
says  Ken  Konigsmark,  Boeing’s  C-TPAT 
program  manager.  “[Overseas  workers]  get 
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SHOPPING  WITHOUT  THE  CHECKOUT  LINES.  Customers  can  say  goodbye  to  waiting,  especially  with 
Intel'  built  in.  Collaborating  with  40  leading  companies  — among  an  ecosystem  of  thousands  — Intel 
Solution  Services  and  the  METRO  Group,  the  world's  third-largest  retailer,  used  Intel®  Xeon®  processor- 
based  servers  to  create  a  unique  "Future  Store"  to  test  new  inventory  technologies  like  radio 
frequency  identification  and  real-time  visibility  of  stock  levels.  Which  resulted  in  dramatic  increases 
in  both  new  customers  and  customer  satisfaction.  Read  more  about  the  METRO  Group's  futuristic 
experience  with  the  depth  and  breadth  of  Intel's  ecosystem  at  intel.com/builtin. 


inside 


Cover  Story 


Security  Compliance 


paid  peanuts,  and  it  would  be  very  easy  to 
bribe  them.”  CIOs  need  to  be  able  to  tell 
when  a  truck  driver  leaves  a  factory  and 
when  he  arrives  at  a  port.  The  CIO  can  then 
alert  Customs  if  a  four-hour  trip  turns  out 
to  take  12. 

This  is  a  major  challenge  when  the  sup¬ 
ply  chain  is  global.  “The  things  we  take  for 
granted  may  be  very  difficult  for  a  coffee 
producer  in  Colombia,”  says  P&G’s  Miller. 
For  factories  and  freight  forwarders  that 
cannot  send  EDI  messages,  CIOs  may  need 
to  set  up  Web-based  access  to  their  supply 
chain  systems.  And  they  better  start  soon, 
since  Customs  is  going  to  want  that  infor¬ 
mation,  sources  say,  as  early  as  next  year. 


CUSTOMS’  ACE  IN  THE  HOLE 

Since  the  late  1990s,  Customs’  Automated 
Targeting  System  (ATS)  has  identified 
which  containers  to  inspect  by  feeding  the 
information  it  possesses  about  a  shipment 
into  an  algorithm  designed  to  calculate  risk. 
Last  summer,  the  DHS  inspector  general 
released  a  report  critical  of  ATS,  saying  it 
didn’t  have  the  information  to  accurately 
identify  suspicious  containers.  The  report 
made  no  reference  to  the  Advance  Trade 
Data  Initiative,  the  targeting  system  that 
Customs  is  currently  piloting. 

ATDI  has  its  roots  in  a  conversation  that 
took  place  shortly  after  9/11  between  Mike 
Laden,  then  president  of  Target’s  custom 


broker  division,  and  the  late  Assistant  Com¬ 
missioner  of  Customs  Bonni  Tischler.  “We 
were  talking  about  the  information  that  Cus¬ 
toms  needs,”  recalls  Laden.  “Finally  I  looked 
at  her  and  said,  ‘Do  you  want  to  know  what 
we  buy?  Heck,  sometimes  we  know  months 
in  advance.’”  Shortly  thereafter,  Laden  gave 
Customs  a  file  with  1,000  purchase  orders— 
data  that  included  a  description  of  the  goods 
being  purchased,  their  price  and  their  fac¬ 
tory  of  origin.  Customs  set  out  to  learn  what 
it  could  from  the  data. 

Pre-9/11,  Customs’  first  encounter  with 
a  container  was  when  it  entered  a  U.S.  port. 
The  only  information  it  had  about  the  con¬ 
tainer  was  the  manifest,  describing  its  con¬ 
tents  and  port  of  origin.  Tom  Bush,  director 
of  targeting  and  analysis  systems  in  Cus¬ 
toms  and  Border  Protection’s  IT  office,  says 
that  from  Customs’  point  of  view,  containers 
simply  materialized  in  an  American  port. 

“Sometimes  we  may  think  a  container 
originated  in  a  safe  port,  when  it  could  have 
come  out  of  Karachi,”  says  Bush.  On  the 
other  hand,  “a  purchase  order  gives  you 
insight  into  the  actual  point  of  origin,  as  well 
as  the  buyer  and  seller  relationship.”  In  early 
2003,  Customs  began  to  build  a  system  that 
was  capable  of  combining  commercial  infor¬ 
mation  like  purchase  orders  and  shipment 
notifications  with  intelligence  reports  and 
other  counterterrorism  information. 

Today,  Target  and  around  30  other  com¬ 
panies  are  participating  in  the  ATDI  pilot. 
(Participation  currently  means  entering  into 
an  understanding  with  Customs  and  doesn’t 
necessarily  include  sharing  data.)  Once  past 
the  pilot  stage,  ATDI  participants  will  need 
to  send  Customs  a  copy  of  a  purchase  order 
as  soon  as  one  is  filled  out  and  a  copy  of  the 
shipping  notification  they  receive  from  a 
factory  when  their  cargo  ships.  Customs 
also  plans  to  collect  information  about  over¬ 
land  transport,  a  container’s  location  within 
a  terminal  and  where  on  the  ship  a  con¬ 
tainer  is  located,  as  well  as  notification  when 
a  container  reaches  its  final  destination  in 
the  United  States. 

One  problem  for  importers  is  that  they 
rely  on  third  parties  such  as  truckers  and 
shipping  companies  for  most  of  this  infor¬ 
mation.  Bush  says  that  companies  will  need 
to  share  only  what  they’re  capable  of  shar¬ 
ing.  But  importers  are  concerned  that  just 


The  Stories  Containers  Tell 

Technology  can  make  the  cargo  talk 

WHEN  FORMER  U.S.  CUSTOMS  AND  BORDER  PROTECTION  Comm  issioner 
Robert  Bonner  was  asked  how  technology  could  help  improve  supply  chain 
security,  he  answered  in  two  words:  smart  containers.  Smart  containers  could 
tell  Customs  officials  (among  other  things)  whether  a  container  had  been  opened,  and, 
if  so,  when  and  where.  Unfortunately,  smart  containers  still  have  problems,  including  a 
high  number  of  false  positives  on  choppy  oceans,  high  costs  and  security  concerns. 
Customs  says  this  is  one  reason  it  hasn’t  rolled  out  the  Green  Lane. 

In  the  meantime,  some  companies  are  using  radio  frequency  identification  (RFID) 
networks  to  track  their  shipments.  General  Motors  parts  coming  from  Canada  to  the 
United  States  are  carried  on  tagged  trucks.  The  tag  includes  the  vehicle  and  container 

identification  numbers  (matched 
to  the  manifest  submitted  by  the 
carrier  and  GM)  and  a  digital 
photo  of  the  driver.  If  the  picture 
doesn't  match  the  driver,  or  the 
numbers  on  the  RFID  device 
don’t  match  the  manifest,  the 
load  is  inspected  and  the  driver 
questioned  by  a  Customs  officer. 

For  intercontinental  ship¬ 
ments,  an  RFID  tag  can  trigger 
automated  alerts  when  a 
container  enters  a  terminal 
equipped  with  an  RFID  network. 
(Without  automated  alerts, 
importers  are  at  the  mercy  of  terminal  operators  who  sometimes  don’t  send  their  man¬ 
ual  alerts  until  days  after  a  container  arrives  in  the  United  States.)  Stanford  Professor 
Hau  Lee  found  that  between  reductions  in  inventory  and  pilfering,  as  well  as  other 
savings,  companies  that  use  technologies  like  RFID  can  avoid  as  much  as  $462  in 
costs  per  container.  Reusable  RFID  tags  range  between  $20  and  $150,  and  networks 
can  cost  from  $30,000  for  a  small  site  to  over  $1  million. 

In  short,  it  will  still  be  a  while  before  RFID  is  ubiquitous.  -B.W. 
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Tough  choice? 

We  didn’t thinkso. 


SELF-SERVICE: 

For  $2.50  a  gallon 

You  could  pumpyour 
own  gas. 
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Security  Compliance 


as  C-TPAT  requires  companies  to  be 
responsible  for  parts  of  their  supply  chains 
for  which  they  are  not  legally  responsible, 
ATDI  will  eventually  demand  that  they 
provide  all  of  the  information  Customs  is 
seeking.  One  place  to  look  for  clues  to  how 
all  this  will  work  out  is  the  ACE  e-mani- 
fest  program  that  Customs  is  piloting  on 
the  Canadian  border  in  Washington  state 
and  Detroit,  and  at  the  Mexican  border  at 
Nogales,  Ariz.,  among  others. 

The  ACE  pilot  asks  cargo  carriers  to 
share  close  to  100  pieces  of  information 
about  their  shipments,  everything  from  the 


“We  had  all  the  systems  in  place  and  it  still 
took  us  more  than  90  days,”  says  Shearn. 

The  ACE  program  foreshadows  how 
ATDI  will  likely  collect  data  from  compa¬ 
nies.  One  Customs  report  identifies  poten¬ 
tial  EDI  standards  companies  could  use  to 
share  information.  But  Customs’  Bush  says 
that  be  it  EDI  or  XML,  “We  have  the  ability 
to  handle  data  in  the  way  that  [CIOs]  use  it.” 

Many  questions  remain  about  how  Cus¬ 
toms  will  protect  the  information  it 
receives,  how  it  will  use  it  and  just  how 
exactly  it  will  carry  out  such  large-scale 
data  mining.  “I  have  a  great  deal  of  con- 


THEROI  OF  SECURITY 

One  of  the  challenges  that  comes  along  with 
securing  the  supply  chain  is  measuring  suc¬ 
cess.  How  do  you  know  you’ve  prevented 
something  that  hasn’t  happened?  Chuck 
Winwood,  a  former  deputy  commissioner  of 
Customs,  now  senior  VP  for  border  secu¬ 
rity  at  the  trade  consultancy  Sandler  & 
Travis,  says  CIOs  should  judge  how  well 
they  are  improving  security  by  using  tradi¬ 
tional  business  metrics:  “Improvements  in 
safety,  insurance  liability,  efficiency— these 
are  outgrowths  of  a  good  security  program.” 

The  reduction  in  inspections  promised 


“Companies  need  to  realize  that  this  isn’t  going  away.  There’s  a  commit¬ 
ment  from  DHS,  and  they  have  the  money  to  make  this  work.” 

-Janet  Shearn,  UPS  director  of  customs  and  trade  compliance 


vehicle  identification  number  on  a  truck  to 
the  address  of  the  importer.  If  Customs  does 
not  receive  all  of  this  data  by  at  least  an 
hour  before  the  truck  reaches  the  U.S.  bor¬ 
der,  there  will  be  various  penalties. 

“The  major  difficulty  for  us  was  that  the 
information  for  the  driver,  vehicle  and  cargo 
were  in  three  different  systems,”  says  Janet 
Shearn,  director  of  customs  and  trade  com¬ 
pliance  for  UPS,  one  of  three  companies 
(along  with  Brown  Line  and  ABF  Freight 
System)  that  participated  in  the  pilot  pro¬ 
gram.  (The  pilot  has  since  expanded  to 
include  about  400  companies,  25  of  which 
are  now  sharing  data  with  Customs.) 

UPS  had  to  integrate  these  three  systems 
in  order  to  send  a  single  timely  EDI  mes¬ 
sage  to  Customs.  The  information  also  had 
to  be  formatted  so  that  Customs  could  read 
it.  For  example,  Customs  wanted  informa¬ 
tion  that  UPS  stored  as  address  line  one  in 
address  line  two.  In  other  cases,  Customs 
wanted  information  that  UPS  simply  didn’t 
have,  such  as  a  driver’s  passport  number. 
And  if  any  of  the  information  was  left  blank 
or  entered  incorrectly,  the  truck,  hypothet¬ 
ically,  could  be  held  at  the  border  until  the 
problem  was  fixed. 

Customs  plans  to  publish  requirements 
for  the  ACE  program  within  the  next  few 
months,  which  means  that  companies  will 
have  90  days  to  comply.  It  won’t  be  easy. 


cern,”  says  Smith  of  GM,  which  is  advising 
Customs  on  ATDI  but  declined  to  partici¬ 
pate  in  the  trial.  “ATDI  is  about  commercial 
data  that  has  never  been  given  to  the  gov¬ 
ernment  before,  and  sometimes  it  is  not 
available  when  they  want  it.  When  you 
force  someone  to  type  data  in  before  it  is 
normally  available,  you  get  errors.  What 
good  is  information  when  it’s  wrong?” 

Security  is  another  concern.  Purchase 
orders  often  contain  competitive  secrets, 
such  as  the  rates  that  factories  charge 
importers.  Not  only  would  the  government 
have  to  protect  this  data  from  hackers,  it 
would  also  have  to  develop  a  way  to  protect 
it  from  Freedom  of  Information  Act  requests. 

And  even  if  it  solves  these  problems, 
there’s  still  the  matter  of  making  the  system 
work.  “It  would  take  20  supercomputers 
chained  together  just  to  go  through  the  data 
from  Target,  Wal-Mart  and  Sears,”  says 
Laden,  who  left  Target  last  May  to  start  the 
consulting  firm  Trade  Innovations.  (Bush 
says  the  system  will  work  but  declined  to 
discuss  specifics,  citing  national  security.) 

Regardless  of  the  difficulties,  Shearn  and 
Laden  are  convinced  that  ATDI  will  move 
forward. 

“Companies  need  to  realize  that  this  isn’t 
going  away,”  says  Shearn.  “There’s  a  com¬ 
mitment  from  DHS,  and  they  have  the 
money  to  make  this  work.” 


by  C-TPAT  are  another  potential  source  of 
ROL  Toymaker  Hasbro  spent  just  under 
$200,000  on  its  up-front  C-TPAT  compli¬ 
ance  and  spends  an  additional  $112,500  a 
year  maintaining  it.  Since  it  became  C-TPAT- 
certified  in  November  2002,  its  inspections 
have  dropped  from  7.6  percent  of  containers 
coming  into  the  U.S.  in  2001  to  0.66  percent 
in  2003.  Given  that  in  2003  the  company 
imported  about  8,000  containers,  and  that 
port  authorities  charge  around  $1,000  per 
inspection,  Hasbro  is  saving  about  $550,000 
a  year  in  inspection  costs  alone,  approxi¬ 
mately  a  5-to-l  return  rate. 

Members  of  the  trade  community  expect 
that  ATDI  participation  will  be  a  require¬ 
ment  for  Green  Lane  status.  And  while  no 
one  has  a  firm  timetable  for  the  merging  of 
ATDI  and  C-TPAT  (Customs  says  that  par¬ 
ticipating  in  the  ATDI  pilot  qualifies  com¬ 
panies  for  tier-three  status),  the  funding  is  in 
place.  In  November,  Sen.  Murray  introduced 
the  Green  Lane  Maritime  Cargo  Security 
Act  of 2005;  expectations  for  its  passage  are 
high.  In  all  likelihood,  CIOs  will  have 
between  18  and  36  months  to  prepare  for 
compliance,  but  a  terror  event  looms  as  a 
wild  card.  If  there’s  an  attack,  that  timetable 
could  telescope  quickly.  BE] 


Senior  Writer  Ben  Worthen  can  be  reached  at 
bworthen@cio.com . 
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New  York  Police  Department 
CIO  JIM  ONALFOused 

his  experience  in  corporate 
IT  to  initiate  critical  changes 
at  the  NYPD.  But  the  depart¬ 
ment's  politics  and  history 
didn’t  always  make  for  an 
easy  ride. 
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Deputy  Commissioner  and  CIO  Jim  Onalfo  put 
his  experience  and  discipline  to  the  test  in 
order  to  turn  around  IT  at  the  NYPD 


BY  THOMAS  WAILGUM 


Jim  Onalfo  wears  a  badge  ■  His  office  is  at  One  Police  Plaza 

in  Manhattan.  He  works  with  guys  who  carry  guns.  And  his  job  security  is  tied  to 
the  whim  of  New  York  City  voters. 

But  all  that  aside,  his  job  as  deputy  commissioner  and  CIO  at  the  NYPD  isn’t  much 
different  from  yours. 

Onalfo  would  know.  Now  66,  he  spent  most  of  his  professional  life  in  the  heart  of  cor¬ 
porate  America’s  IT  at  the  likes  of  General  Foods,  Kraft  and  The  Stanley  Works.  Now 
he’s  trying  to  take  the  corporate  discipline  he  learned  at  his  previous  posts  and  apply 
it  to  the  insular,  bureaucratic,  paramilitary  culture  that  is  the  NYPD. 

The  organization  was  certainly  in  need  of  a  technology  overhaul.  NYC  Police 
Commissioner  Raymond  Kelly,  Onalfo’s 


boss,  refers  to  the  NYPD’s  old  IT  infra¬ 
structure  as  murky,  stovepiped  and 
underfunded.  “We’ve  always  been  chal¬ 
lenged  as  far  as  IT  is  concerned,”  he  says. 
The  ironic  part  is  that  the  department, 
which  is  bursting  with  authority  types, 
had  never  been  able  to  find  a  strong 

PHOTOGRAPHY  BY  PETER  MURPHY 


Reader  ROI 

::  The  differences  between  public- 
and  private-sector  IT  jobs. 

::  Innovative  ways  to  deal  with 
slow-to-change  environments 

::  The  importance  of  executive  spon¬ 
sorship  to  achieve  large-scale  goals. 
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NYC  Police  Commis¬ 
sioner  RAYMOND 
KELLY  thought  the 
department  needed 
the  experience  of  a 
corporate  IT  manager 
to  break  it  out  of  its 
“murky,  stovepiped” 
past. 
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assembled  by  Commissioner  Kelly.  “The 
department  never  reached  out  to  non-law 
enforcement  folks  to  man  high  positions  in 
the  department,”  Kelly  says.  “But  it  was 
clear,  certainly  post-9/11,  that  we  needed 
some  big-league  help.”  To  that  end,  Kelly 
consciously  sought  experienced  leaders 
from  outside  the  walls  of  One  Police  Plaza, 
and  that  led  to  Onalfo’s  hiring. 

Despite  his  lack  of  government  and  law 
enforcement  knowledge,  Onalfo  has  been 
able  to  transition  to  life  inside  the  NYPD, 
fulfilling  Kelly’s  desire  to  infuse  his  IT 
department  with  private-sector  practices. 
(See  “A  CIO  Is  a  CIO  Is  a  CIO,”  Page  56,  for 
more  on  how  CIOs  move  between  indus¬ 
tries.)  Not  that  the  change  has  been  easy. 
Onalfo  has  had  to  adjust  to  the  politics,  ven¬ 
dor  selection  regulations  and  the  generally 
slower  pace  of  public-sector  entities.  But 
with  the  tribulations  have  come  successes, 
most  notably  a  new  disaster  recovery  plan, 
a  revamped  communications  system  and 
the  Real  Time  Crime  Center,  which 
launched  in  July.  Through  the  center,  detec¬ 
tives  can  now  easily  access  what  were  once 
disparate  databases  filled  with  millions  of 
criminal  records;  searchers  now  uncover 
in  a  matter  of  seconds  records  that  previ¬ 
ously  would  have  taken  weeks  or  months  to 
find— if  they  were  found  at  all.  “It’s  a  real- 
world  crime-fighting  tool,”  Kelly  says. 

Onalfo  on  Board 

The  Real  Time  Crime  Center  could  never 
have  been  rolled  out,  at  least  not  success¬ 
fully,  if  Kelly  had  not  understood  that  the 
NYPD’s  IT  department  was  in  trouble.  By 
spring  2003,  a  bit  of  consulting  from  IBM, 
Deloitte  &  Touche  and  Merrill  Lynch  had 
confirmed  Kelly’s  suspicions  about  the 
nature  of  the  ills  that  afflicted  the  informa¬ 
tion  infrastructure:  outdated  systems, 
siloed  data,  faulty  communications  and  no 
grand  plan  for  a  departmental  architecture. 

Kelly’s  first  priority  was  to  bring  some¬ 
one  in  from  the  private  sector  who  knew 
IT,  could  handle  the  NYPD’s  culture  and 
would  not  have  to  depend  on  a  civil  ser¬ 
vant’s  salary.  Previous  NYPD  IT  chiefs 
were  officers  who  would  rather  have  been 
walking  the  beat  than  meeting  with  software 
vendors.  “Because  we  were  underfunded, 


leader  for  IT.  “IT  didn’t  have  that  overar¬ 
ching  authority,”  Kelly  says,  meaning  some¬ 
one  who  knew  IT  and  who  could  vet 
projects  and  finish  a  job  once  it  got  started. 

In  May  2003,  Onalfo  came  out  of  retire¬ 
ment  to  be  the  first-ever  NYPD  CIO.  He 
was  in  for  a  shock.  Upon  arrival  he  discov¬ 
ered  that  the  department  lacked  an  adequate 
disaster  recovery  plan  with  redundancy  and 
backup  sites— 20  months  after  9/11.  If,  say, 
there  had  been  a  fire  in  one  of  the  precincts 


and  it  torched  the  computers,  officers 
wouldn’t  have  been  able  to  process  crimi¬ 
nals  within  the  24-hour  time  frame  estab¬ 
lished  by  state  law.  Consequently,  those 
perps  would  have  walked.  “I  almost  left  the 
same  day  I  got  here  because  I  didn’t  want  to 
be  responsible  for  that,”  Onalfo  recalls. 

But  he  decided  to  stick  it  out,  and  today 
Onalfo  is  both  the  emblem  of  the  NYPD’s 
new  IT  strategy  and  an  important  cog  in 
the  revamped  senior  management  machine 
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what  we  had  done  is  use  uniformed  police 
officers— whose  real  job  should  have  been 
out  protecting  the  city— to  fill  the  gaps 
where  we  couldn’t  hire  anybody  or  pay  the 
salaries  to  properly  staff  our  IT  function,” 
Kelly  says. 

While  looking  for  leads  on  possible  can¬ 
didates,  Onalfo’s  name  came  up  in  conver¬ 
sations  with  both  former  Kraft  and  IBM 
exec  Lou  Gerstner  and  IBM  VP  Nick 
Donofrio.  During  interviews  with  Kelly 
and  Mayor  Michael  Bloomberg,  Onalfo  dis¬ 
covered  two  believers  in  technology  who 
were  ready  for  a  change.  Onalfo’s  alliance 
with  the  two  has  enabled  IT  and  business 
alignment  on  a  scale  not  seen  in  most  gov¬ 
ernment  organizations.  “In  this  business, 
we’re  always  going  to  need  boots  on  the 


ground,”  Kelly  says.  “But  to  help  them  do 
their  job,  there’s  a  tremendous  potential  to 
use  technology.” 

Kelly  began  with  a  vision  of  what  he 
wanted  from  IT.  The  cornerstone  of  that 
vision  would  be  the  Real  Time  Crime  Cen¬ 
ter.  But  even  with  boardroom  backing, 
Onalfo  still  had  a  tough  assignment  ahead. 

The  Strategic-Planning 
Wizard 

Onalfo  is  not  good  at  retiring.  He’s  done  it 
twice,  once  from  Kraft  at  age  58  and  once 
from  The  Stanley  Works  at  61.  As  he  moves 
restlessly  about  his  office,  it’s  easy  to  tell 
why  it  didn’t  stick.  “My  mind  is  very  agile. 
When  you  retire,  you  slow  down,”  Onalfo 
says.  “My  wife  says  I’m  not  happy  if  I  don’t 
have  a  hundred  things  going  on.” 

During  his  nearly  40  years  in  IT,  Onalfo 
has  developed  what  he  refers  to  as  a  strate¬ 
gic-planning  Wizard:  an  IT  process  tool 
combining  software  and  100  pages  of 
spreadsheets  that  allows  him  to  map  busi¬ 
ness  priorities  and  processes  throughout 
an  entire  organization  and  link  them  to  IT 


projects.  Each  year,  armed  with  that  pre¬ 
cise  knowledge,  Onalfo  would  present  the 
Wizard  to  his  bosses  at  Kraft  or  The  Stan¬ 
ley  Works  and  have  them  sign  off  on  the 
strategy.  “Businesspeople  often  say,  ‘We 
don’t  understand  what  these  IT  projects 
are  for,”’  Onalfo  says.  “But  they  approve 
them  anyway  because  they’re  afraid  not  to. 
I  eliminated  the  mystique.” 

The  NYPD  would  now  test  Onalfo’s  tool. 

Since  there  never  had  been  an  overarch¬ 
ing  IT  plan  for  the  department,  Onalfo’s 
Wizard  was  welcomed.  “When  people 
know  there’s  a  plan  and  there’s  a  goal  and 
what  the  pieces  are,  they  feel  comfortable, 
and  they  move  toward  it,”  Onalfo  says.  “I 
don’t  sit  and  convince  people  that  this  is 
what  you  have  to  do.  I  say,  this  is  what  we’re 


going  to  do.”  From  May  to  November  2003, 
he  built  his  business  case,  meeting  with 
key  NYPD  staff.  Then  he  presented  his  IT 
plan  to  Bloomberg,  Kelly  and  six  key  NYPD 
staffers,  who  signed  off  on  it  and  approved 
the  initial  funding  for  the  department. 
(Funding  for  each  project  would  come  only 
after  Onalfo  justified  its  merits.) 

Among  the  dozens  of  projects  Onalfo 
targeted  ,  a  few  screamed  out  for  immediate 
help.  The  disaster  recovery  plan  and  the 
lack  of  a  redundant  backup  site  were  the 
top  concerns.  The  vulnerability  surprised 
and  rattled  both  Onalfo  and  other  staff 
members.  “We  thought  what  we  had  was 
redundancy,”  says  Thomas  Gangone, 
deputy  chief  and  commanding  officer  of 
technology  and  systems,  who’s  been  a  New 
York  City  cop  for  38  years.  “When  he  looked 
at  it,  he  knew  we  didn’t.” 

Before  Onalfo  could  enable  a  disaster 
recovery  plan,  however,  he  needed  to  up¬ 
grade  the  NYPD’s  complex  infrastructure 
of  hardwired  networks.  He  turned  to  Veri¬ 
zon  to  install  a  new  network,  a  self-heal¬ 
ing,  synchronous  optical  networking  (Sonet) 
ring  that  runs  around  New  York  City.  The 


$24  million  fiber  project  enables  new  forms 
of  real-time  data  transfer  as  well  as  com¬ 
munication  (such  as  videoconferencing) 
between  One  Police  Plaza,  the  command 
centers,  76  precincts  and  other  police  build¬ 
ings  in  the  city.  Data  transfer  is  much  faster 
now  with  the  Sonet  ring  in  place.  And 
downtime  per  month  has  shrunk  from  300 
hours  to  10  to  20  hours  combined  across  all 
the  precincts,  Onalfo  says. 

With  the  Sonet  ring  providing  the  con¬ 
nections,  Onalfo  could  tackle  the  disaster 
recovery  problem.  Backup  plans  and  sys¬ 
tems  are  absolutely  vital  in  law  enforce¬ 
ment  because  “if  you  lose  arrest-and- 
arraignment  capability,  it’s  a  question  of 
how  well  you  can  control  the  city,”  Onalfo 
says.  “It’s  not  the  only  ingredient,  but  it  cer¬ 
tainly  is  a  key  factor.” 

Up  first  was  one  of  the  toughest  and  most 
complex  challenges  of  Onalfo’s  backup 
plan:  duplicating  all  of  the  network  con¬ 
nections  that  the  NYPD  maintains,  includ¬ 
ing,  among  others,  the  connection  to  the 
fingerprint  database  in  the  state  capital  in 
Albany.  He  also  had  to  ensure  that  the 
NYPD’s  data  warehouse,  which  provides 
access  to  millions  of  criminal  and  related 
records,  would  have  redundancy.  The 
NYPD’s  systems  also  had  to  connect  into 
New  York’s  courthouses.  And  the  depart¬ 
ment  needed  an  offsite  backup  facility  in 
case  of  a  disaster. 

This  would  have  been  a  load  of  work  any¬ 
where,  but  during  his  first  dozen  months 
Onalfo  was  also  baptized  into  the  bureau¬ 
cratic  machine  that  is  city  government.  The 
disaster  recovery  upgrade,  for  instance,  took 
a  year  rather  than  the  few  months  Onalfo 
had  wanted— but  it  only  happened  at  all 
because  of  his  effort.  And  though  he  skirts 
the  issue,  others  in  the  department  noticed 
his  frustration.  “He  could  not  understand 
that  if  everybody  knew  we  needed  [disaster 
recovery],  why  can’t  we  buy  it  now,”  Gan¬ 
gone  says.  “But  we  accomplished  this 
because  of  his  push,  push,  push,  push.” 

Crime  Happens  in  Real-Time 

In  person,  Onalfo  doesn’t  seem  pushy,  just 
confident.  To  survive  at  the  NYPD  and  lead 
what  had  been  a  listless,  underfunded  IT 
department,  he  had  to  be.  “In  a  corpora- 


Looking  over  the  Real  Time  Crime 
Centers  requirements,  Onalfo 
knew  he  didn't  have  the  necessary 
IT  expertise  in-house  to  do  the  job. 
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Government  IT 


A  CIO  Is  a  CIO  Is  a  CIO 


IT  execs  begin  to  move  from  industry  to  industry 

BY  ALL  ACCOUNTS,  Jim  Onalfo  has  successfully  moved  from 
the  ice  cream  and  cheese  business  to  the  top  IT  spot  in  the 
NYPD.  How  he  adapted  to  the  iconic  police  culture,  with  no 
previous  law  enforcement  experience,  is  simple,  he  says.  “My 
philosophy  is  that  you  need  to  understand  how  to  be  a  CIO 
first— then  you  can  adapt  to  any  role.  I  didn’t  know  anything 
about  law  enforcement,  but  I  did  know  how  to  run  an  IT  shop,” 
Onalfo  says. 

According  to  CIO  recruiters,  Onalfo’s  cross-industry  migra¬ 
tion  is  representative  of  a  trend  in  which  CIOs  are  no  longer 
bound  to  one  vertical  segment  for  their  careers.  “I  would  call 
[Onalfo’s  move]  progressive,  not  radical,”  says  Marc  Lewis, 

CEO  of  the  Leadership  Capital  Group,  which  places  CIOs.  “If 
you  look  at  industries  that  hire  people  from  within  their  indus¬ 
try,  the  result  usually  is  an  inbred  technology  function,  with 
less  creativity  and  less  economic  value  added.” 

With  only  a  few  industry  exceptions,  such  as  financial  serv¬ 
ices  and  retail,  which  tend  to  hire  their  own,  companies  are  now 
looking  to  hire  CIOs  with  fresh  ideas  regardless  of  the  industry 
they  came  from.  Lewis  says  CIOs  who  operate  in  parallel  indus¬ 
tries  can  move  the  easiest.  Parallel  doesn’t  mean  competitors, 
he  says;  it  means  companies  in  different  industries  with  analo¬ 
gous  challenges  that  might  not  be  apparent  on  the  surface. 

For  example,  a  company  like  Merrill  Lynch  might  look  to  an  IT 
person  who  worked  at  global  travel  distributor  Sabre  because 
both  companies  deal  with  huge  amounts  of  real-time,  mission- 
critical  information,  where  physical  or  financial  life  is  at  stake. 


As  another  example,  industries  such  as  health  care  look  to 
financial  services  for  fresh  talent  because  those  IT  leaders 
thrive  in  a  high-reliability  environment  with  emphasis  on  pri¬ 
vacy,  security,  and  large  consumer  databases  and  transactions. 
“When  the  application  sets  are  similar,  there’s  movement,” 
says  Mark  Polansky,  leader  of  Korn/Ferry’s  Information 
Technology  Center  of  Expertise  across  North  America. 

However,  not  all  industry  switches  are  created  equal,  says 
Martha  Heller,  managing  director  of  the  IT  Leadership  Practice 
at  executive  recruiter  Z  Resource  Group.  Going  from  the  media  to 
manufacturing  industries,  or  moving  from  government  to  the  pri¬ 
vate  sector,  might  be  switches  where  the  skill  sets  are  too  distinct 
from  each  other,  Heller  notes.  She  also  says  that  when  she  talks 
with  CIOs  about  their  career  interests,  industry-specific  desires 
are  always  low  on  the  list.  “Things  they  mention  are  challenges, 
compensation  and  location,”  she  says.  "When  I  ask  them,  ‘Do 
you  care  what  industry  the  position  is  in?’  typically  they  say  no.” 

If  the  NYPD  had  asked  Polansky  to  find  it  a  CIO,  he  says  he 
probably  would  not  have  looked  to  the  manufacturing  industry 
as  a  primary  source  for  candidates.  For  him,  the  common 
denominators  between  the  NYPD  and  another  industry  would 
be  building  and  maintaining  a  large  number  of  “customer” 
databases,  experience  with  mission-critical  information  sys¬ 
tems  and  typical  back-office  functions  (time  and  attendance 
of  cops).  Financial  services  or  retail  would  be  his  first  options, 
“where  maintaining  and  retrieving  customer  information  and 
database  mining  is  a  big  deal,”  Polansky  says.  -T.W. 


tion,  I  could  get  a  lot  of  things  done  whether 
the  CEO  wanted  to  or  not.  I  knew  how  to 
find  my  way  around,”  he  says.  But  at  the 
NYPD,  everything  had  to  go  through  Kelly 
and  City  Hall.  “Here,  if  [Kelly]  didn’t  want 
to  do  it,  it  wouldn’t  get  done.” 

That  wasn’t  an  issue  with  the  Real  Time 
Crime  Center.  This  was  Kelly’s  baby,  and 
Onalfo  had  to  deliver.  And  he  did.  He’s 
proud  of  the  center,  which  opened  in  July. 
Costing  $12  million  to  build,  the  room  looks 
more  like  a  NASA  control  facility  than  a 
police  department  office.  A  movie-theater- 
size  screen  on  the  front  wall  flashes  infor¬ 
mation  on  criminals  and  their  victims, 
crime  pattern  analysis,  maps  of  hot  spots  in 
the  city  and  more.  A  ticker  along  the  bottom 
notes  incoming  911  calls.  The  center  is 
manned  24/7,  with  15  analyst  workstations 
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and  26  trained  staffers,  mostly  cops.  Onalfo 
likes  to  think  of  it  as  a  super  help  desk 
staffed  not  with  IT  personnel  but  detectives 
and  officers  who  know  the  business  of 
policing  and  understand  the  value  of  real¬ 
time  information.  (For  a  video  clip  of  the 
center,  go  to  www.cio. com/030106.) 

There  is  a  palpable  buzz  in  the  center. 
Detectives  working  on  cases  freely  share 
stories  of  how  the  center  and  its  access  to 
millions  and  millions  of  public  and  private 
records  has  made  their  jobs  much  easier. 
Pattern  analysis  lets  detectives  focus  on 
crime  hot  spots;  link  analysis  lets  them  see 
the  relationships  between  criminals  and 
other  potential  criminals  and  victims;  and 
databases  that  contain  information  on 
physical  characteristics  (such  as  tattoos), 
weapons  and  aliases  can  connect  even  the 


most  insignificant  pieces  of  information  to 
provide  clues  and  evidence. 

A  frequent  complaint  before  the  center 
existed  was  the  lack  of  a  one-stop  distribu¬ 
tion  point  for  information  such  as  criminal 
records,  accomplices,  phone  numbers,  tip¬ 
sters  and  all  of  the  other  data  that  goes  into 
good  policing.  Hundreds  of  stovepipes 
existed.  Detectives  had  to  move  between 
paper  files  and  computer  screens  to  correlate 
case  information— a  process  that  could  take 
days,  weeks  or  longer,  depending  on  the 
case’s  variables.  The  NYPD  wasn’t  an  organ¬ 
ization  that  was  afraid  of  technology;  it  was 
an  organization  that  was  naive  to  the  chal¬ 
lenges  of  pulling  it  all  together  and,  unfor¬ 
tunately,  had  no  one  to  translate  needs  into  a 
viable  system  on  time  and  on  budget. 

Looking  over  the  Real  Time  Crime  Cen- 
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ter’s  requirements,  Onalfo  knew  he  didn’t 
have  the  necessary  IT  expertise  in-house 
to  do  the  job.  Yet  both  he  and  Kelly  were 
pushing  hard  to  have  the  project  up  and 
running  as  quickly  as  possible;  it  wasn’t  a 
stretch  to  believe  that  lives  were  at  stake 
with  every  delay.  Faced  with  these  chal¬ 
lenges,  Onalfo  and  the  NYPD  turned  to 
Dimension  Data,  a  global  integrator  with 
offices  in  New  York  City.  Dimension  Data 
had  worked  with  the  department  before, 
and  quickly  sent  project  managers  to  meet 
with  detectives  and  create  mini  “days  in  the 
lives”  profiles  to  help  Dimension  Data  pro¬ 
grammers  model  the  day-to-day  needs  of 
police  officers.  In  the  end,  Dimension  Data 
and  the  department  created  links  between 
databases  containing  S  million  New  York 
State  criminal  records,  and  parole  and  pro¬ 
bation  files;  20  million  NYC  criminal  com¬ 
plaints,  911  and  311  calls,  and  summonses; 
31  million  national  crime  records;  and  33 
billion  public  records.  Driven  by  Onalfo’s 
desire,  the  project  took  10  months— a  rapid 
execution  by  any  standard  and  especially 
impressive  for  the  public  sector. 

NYPD  officials  claim  this  center’s  cen¬ 
tralized  system,  with  its  scope  and  speed,  is 
a  first  of  its  kind  in  law  enforcement.  For 
the  4,000  NYPD  detectives  using  the  sys¬ 
tem,  the  difference  is  unbelievable.  “It’s 
beyond  their  imagination,  even  at  this 
point,”  says  Gangone.  “And  this  is  just  the 
beginning.”  Onalfo  concurs,  noting  that 
before  the  Real  Time  Crime  Center,  detec¬ 
tives  used  slow,  disconnected  methods  back 
at  their  precincts  to  access  information.  Now, 
he  says,  those  same  detectives  can  arrive  at 
a  crime  scene  and  have  data  waiting  for 
them.  As  of  October,  NYPD  detectives  have 
used  the  center  to  aid  hundreds  of  investi¬ 
gations,  though  the  NYPD  wouldn’t  share 
specific  details. 

Four  More  Years 

But  Onalfo  knows  there  is  more  work  to  do. 
For  instance,  each  of  the  76  precincts  is  now 
connected  by  a  videoconferencing  system 
that  ties  into  a  command  center  at  One  Police 
Plaza.  Within  some  of  the  precincts,  how¬ 
ever,  there  are  still  detectives  using  type¬ 
writers  to  fill  out  paper  reports.  “We  can’t 
data  mine  those  papers,”  Onalfo  says.  Yet 
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new  PCs  for  those  detectives  still  await  fund¬ 
ing  approval. 

But  no  one’s  arguing  with  the  NYPD’s 
recent  success.  Even  with  3,000  fewer 
police  personnel  since  Mayor  Bloomberg 
took  office  in  2002,  major  crime  is  down 
20  percent  in  New  York  City.  Though  it’s 
difficult  to  attribute  a  percentage  of  that 
to  a  renewed  IT  department,  Kelly  is  aware 
of  the  change.  “There’s  an  attitude  and 
awareness  of  information  technology  in 
the  department  that  there’s  never  been 
before,”  Kelly  says. 

New  York  City  voters  reelected  Mayor 
Bloomberg  in  November,  and  that  means 
his  appointees— including  Kelly  and 
Onalfo— were  given  four  more  years  to 


"In  this  business, 
we're  always 
going  to  need 
boots  on  the 
ground.  But  to 
help  detectives 
do  their  job, 
there's  a  tremen¬ 
dous  potential  to 
use  technology." 

-Raymond  Kelly,  New  York  City 
Police  Commissioner 


build  on  their  successes.  Onalfo  isn’t 
phased  by  any  of  it.  “I  don’t  pay  attention  to 
the  politics,”  he  says. 

Even  so,  after  spending  an  hour  or  so 
detailing  accomplishments  and  weighing 
future  challenges,  Onalfo  digresses.  “If  I 
were  to  pack  this  up  right  now,  I  would  be 
satisfied,”  he  confides.  Fortunately  for  the 
police  officers  and  residents  of  New  York 
City,  there  is  still  more  work  to  be  done  on 
his  shift.  His  next  retirement  can  wait  a  lit¬ 
tle  longer.  BOS 


Senior  Writer  Thomas  Wailgum  can  be  reached 
at  twailgum@cio.com. 
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E-Commerce 


IN  THE  ONLINE  PLAN 


Rich  Internet  technologies  can  make 
your  website  more  engaging  for  customers 
and  more  profitable  for  you 
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AMERICAN  CONSUMERS  LOVE 
e-commerce  so  much  that  despite  growing  fears 
gjbut  identity  theft,  they  spent  $172  billion 
shopping  online  in  2005,  according  to  For¬ 
rester  Research.  But  on  the  Web,  customers 
tend  to  be  more  fickle  and  price-sensitive  than 
they  are  when  shopping  at  the  mall. 

According  to  a  recent  study  by  BizRate  and 
Shopzilla,  59  percent  of  online  shoppers  use 
search  engines  and  aggregator  sites  like  Price- 
Grabber  to  research  products  and  compare 
prices  before  they  go  to  a  particular  merchant’s 
site.  In  the  virtual  world,  com¬ 
panies  have  always  been  chal¬ 
lenged  to  make  their  websites 
user-friendly  and  engaging  so 
that  when  the  customer  gets  to 
their  site,  he  sticks  around  and 
spends  some  money. 

However,  differentiating 
websites  is  becoming  easier  for 
companies  thanks  in  large  part 
to  the  proliferation  of  broad¬ 
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band  in  American  homes.  Among  American 
households  with  Internet  access,  40.1  million 
have  broadband  connections  (about  3  million 
more  than  use  dial-up),  according  to  eMar- 
keter,  a  market  research  company.  With  more 
consumers  accessing  the  Internet  via  broad¬ 
band,  companies  now  have  the  opportunity 
to  create  competitive  advantage  by  deploying 
flashy  new  technologies  that  will  make  their 
sites  more  engaging— and  thus  more  likely  to 
keep  customers  shopping. 

These  bandwidth-hogging  technologies, 
which  include  Flash,  bots  and 
multimedia,  as  well  as  the 
trendiest  of  the  bunch,  Ajax, 
aren’t  accessible  or  practical  for 
users  with  dial-up  connections. 
These  technologies  enrich  and 
enliven  the  online  shopping 
experience.  In  the  case  of  bots, 
they  can  improve  customer 
service,  while  Flash,  multime¬ 
dia  and  Ajax  can  make  the 


BY  MERIDITH  LEVINSON 


58 


MARCH  1,  2006  |  www.cio.com 


PHOTO  BY  KATHLEEN  DOOHER 


fr'  Xr,T;>  •  j.  ry.y;--;r.’. 

TROY  BROWN,  senior 
director  of  e-commerce 
with  Timberland,  wants  to 
give  online  customers  the 
sense  that  they  are  holding 
a  boot  in  their  hands. 
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entire  process  of  shopping  more  intuitive.  (For  more  on  Ajax,  read 
“Ajax  Arrives  for  the  Enterprise,”  ioiow.cio.com/02lS06.)  Some  com¬ 
panies  are  also  using  the  next  generation  of  Web  monitoring  tools, 
which  enable  them  to  track  individual  consumers’  online  behav¬ 
ior  in  real-time,  to  identify  precisely  how  to  improve  their  sites. 

The  point  of  these  technologies,  says  Troy  Brown,  senior  direc¬ 
tor  of  e-commerce  for  boot-maker  Timberland,  is  to  “replicate  in 
the  virtual  world  the  experiences  people  have  in  our  stores.”  Lead¬ 
ing-edge  companies  such  as  Timberland,  Ikea,  auto  auctioneer 
Manheim  and  Safeway.com  have  increased  their  transaction  sizes, 
boosted  conversion  rates  of  visitors  to  buyers  and  improved  cus¬ 
tomer  service  by  deploying  advanced  Web  technologies. 

Your  company  can  achieve  positive  results  too.  Here’s  what 
you  need  to  know  in  order  to  keep  customers  returning  to  your 
website  for  more. 

WHAT’S  WRONG  WITH  WHAT  YOU’RE  DOING  NOW 

HTML  is  the  cause  of  most  of  the  usability  problems  associated 
with  e-commerce.  The  programming  language  was  developed  for 
linking  scientific  papers  and  retrieving  information,  not  for 
multistep  transactions  such  as  ordering  galoshes  online,  says 
Fumi  Matsumoto,  cofounder  of  e-commerce  vendor  Allurent. 

Yet  it  became  the  standard  for  e-commerce  because  it  was  the 
standard  for  delivering  information  to  a  variety  of  operating  sys¬ 
tems  and  browsers.  Furthermore,  most  consumers  used  dial-up 
modems  to  access  the  Web  in  its  early  days.  HTML  was  simple 
enough  for  dial-up  connections  to  digest,  so  that  webpages  didn’t 
take  10  minutes  to  load,  says  Darryl  Gehly,  vice  president  of  Mol¬ 
ecular,  a  Web  design  company  based  in  Watertown,  Mass.  Because 
most  e-commerce  sites  used  HTML,  and  those  sites  were  designed 
to  accommodate  the  slowest  computers,  all  websites  began  to  look 
and  function  the  same  way. 

“The  main  way  you  shop,  by  clicking  on  categories  and  drilling 
down  until  you  find  or  don’t  find  what  you’re  looking  for,  is  the 
experience  everywhere,”  says  Matsumoto.  But  that’s  no  way  to 
make  your  brand  stand  out  from  hundreds  of  others  in  the  Web 
universe,  or  give  customers  any  reason  to  return  to  your  site  a  sec¬ 
ond  time.  What’s  more,  the  kludgey  user  interface  has  led  to  shop¬ 
ping  cart  abandonment  rates  of  more  than  50  percent,  according 
to  Forrester. 

The  solution  to  e-commerce’s  problems  is  rich  Internet  appli¬ 
cations.  These  are  mini-applications  that  run  inside  a  browser 
and  function  like  desktop  applications  in  that  they  respond 
instantly  to  user  input.  For  example,  rich  Internet  applications  let 
users  drag  and  drop  images  and  text  without  having  to  get  infor¬ 
mation  from  a  server  to  refresh  the  page.  They  also  enable  infor¬ 
mation  to  pop  up  automatically  when  a  user  rolls  her  mouse  over 


a  graphic.  Rich  Internet  technologies  work  by  taking  advantage  of 
the  capabilities  in  browsers,  such  as  Flash  plug-ins,  that  support 
such  functions,  says  Gehly. 

Because  these  technologies  make  online  commerce  more  fluid 
and  intuitive,  they  can  reduce  shopping  cart  abandonment  rates  and 
increase  transaction  sizes,  say  Matsumoto  and  Gehly.  In  2003, 

Yankee  Candle  deployed 
a  Flash  application  on  its 
website  that  allows  cus¬ 
tomers  to  create  their  own 
votive  candles.  According 
to  Gehly  (whose  company 
helped  design  the  applica¬ 
tion),  that  capability  led  to 
a  25  percent  increase  in  the 
number  of  items  pur¬ 
chased  per  order  and  a 
staggering  1,400  percent 
increase  in  conversion 
rates.  In  addition  to  using 
rich  Internet  applications 
to  improve  the  online  shopping  experience,  companies  are  using 
streaming  audio  and  video,  artificial  intelligence  in  the  form  of 
avatars  and  bots,  as  well  as  real-time  analytics. 

Jeffrey  Rayport,  coauthor  of  Best  Face  Forward:  Why  Compa¬ 
nies  Must  Improve  Their  Service  Interfaces  With  Customers,  says  it’s 
in  companies’  best  interests  to  try  out  new  Web  technologies.  “If 
you  don’t  find  a  way  to  experiment  with  these  new  technologies 
to  find  out  which  will  be  relevant  to  your  customers,  and  your  com¬ 
petitors  get  it  right,  you’ll  have  a  lot  of  catching  up  to  do,”  he  says. 

LET  YOUR  CUSTOMERS  CUSTOMIZE 

The  success  of  stores  such  as  Williams-Sonoma,  with  its  cooking 
demonstrations,  and  Build-a-Bear  Workshop— each  of  which 
engage  customers  in  an  activity  or  experience— underscores  a  truth 
in  retailing  that  is  just  as  important  in  the  online  world  as  it  is  in  the 
brick-and-mortar  world:  The  more  fun,  satisfying  and  easier  you 
make  it  for  people  to  do  business  with  you,  the  richer  your  fortunes 
will  be.  One  company  that  understands  this  concept  and  is  apply¬ 
ing  it  on  its  website  is  Timberland. 

In  August  2004,  the  Stratham,  N.H.-based  boot-maker  launched 
a  product  configurator  on  its  website  that  let  consumers  customize 
one  of  its  basic  boots.  The  idea  came  from  Timberland’s  supply 
chain  organization,  which,  the  previous  year,  had  successfully 
developed  the  ability  to  mass-customize  boots  in  its  manufactur¬ 
ing  facilities.  The  configurator  was  developed  in  HTML  and  moved 
consumers  through  the  process  of  customizing  their  boot  with 
pull-down  menus.  “We  sold  a  lot  of  custom  boots 
that  way  because  people  loved  the  product,”  says 
Brown.  “But  it  wasn’t  an  experience.  It  was  like 
filling  out  an  order  form.” 

Instead,  Brown  wanted  the  configurator  to 
give  customers  the  sense  that  they  were  holding 
the  boot  and  color  swatches  in  their  hands.  So 


New  technologies  can  reduce  shopping 
cart  abandonment  rates  and  increase 
transaction  sizes. 
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Timberland  hired  Fluid,  a  Web  design  company,  to  help  create  a 
more  interactive  and  more  satisfying-to-use  version  of  the  con¬ 
figurator.  The  new  configurator  is  an  example  of  a  Flash-based  rich 
Internet  application. 

Now,  when  consumers  click  on  the  “Custom  Boots”  tab  on  Tim- 
berland.com’s  homepage,  they  download  the  configurator  appli¬ 
cation  onto  their  computer  (it  takes  about  10  seconds).  Because  the 
application  resides  on  the  user’s  computer,  it’s  much  faster  than 
traditional  Web  applications,  which  require  communication  with 
a  back-end  Web  server.  In  the  HTML  version,  whenever  a  con¬ 
sumer  clicked  on  a  color  swatch,  the  webpage  would  go  blank 
while  it  refreshed  with  the  new  image  of  the  boot.  Now,  a  person 
can  drag  her  mouse  over  a  color  swatch  and  the  image  of  the  boot 
changes  instantly.  Consumers  can  also  click  and  drag  their  mouse 
across  the  image  of  the  boot  to  change  its  orientation,  as  if  they  were 
turning  the  boot  in  their  own  hands. 

“The  configurator  on  our  site  today  is  far  beyond  anything 
we’ve  had  on  our  site  [before].  It’s  an  experience.  You  go  in  and 
play.  You  have  fun.  It’s  interactive  and  intuitive,”  says  Brown. 
Consumers  like  it  so  much  that  as  many  as  1,000  of  them  every  day 
click  the  “Tell  a  Friend”  feature  on  Timberland.com  to  bring  the 
configurator  to  others’  attention. 

The  configurator  is  more  than  just  fun  and  games.  It  has  created 
an  important  revenue  stream,  Brown  says.  The  percentage  of  cus¬ 
tomers  who  buy  boots  after  trying  the  configurator  is  quadruple 


the  rate  of  purchases  after  the  first  version  of  the  configurator. 
“That  kind  of  lift  is  all  related  to  the  experience  and  interactivity,” 
he  says. 

BRING  THE  STORE  TO  THE  CUSTOMER 

Another  set  of  tools  that  makes  the  virtual  shopping  experience 
more  engaging  is  audio  and  video.  Multimedia  technologies  enable 
customers  to  view  product  demonstrations  before  they  buy,  much 
as  they  might  in  a  brick-and-mortar  store. 

Auto  auctioneer  Manheim  uses  real-time  audio  and  video  to 
simulcast  its  used  car  auctions.  The  video  feed  shows  the  car  that 
is  in  the  auction  lane  and  all  the  bidders  onsite  around  the  car  rais¬ 
ing  their  hands  as  they  make  their  bids.  The  audio  enables  the 
remote  bidder  to  hear  the  auctioneer  make  his  calls  so  that  the  bid¬ 
der  can  experience  what’s  happening  on  the  auction  floor. 

Manheim’s  VP  and  CIO,  Joe  Luppino,  says  simulcasting  enables 
Manheim  to  reach  a  wider  audience  of  potential  buyers  and  makes 
it  easier  for  buyers  to  participate  in  auctions  since  they  don’t  have 
to  travel  to  the  auction  site;  buyers  can  bid  in  real-time  over  the 
Internet.  “Simulcasting  offers  online  bidders  the  ability  to  attend 
more  sales  [virtually]  than  they’d  be  able  to  attend  in  one  week,  and 
it  offers  them  the  ability  to  [virtually]  attend  sales  in  multiple 
states  in  one  day,”  says  Luppino. 

The  more  buyers  Manheim  can  attract  to  its  auctions,  the  hap¬ 
pier  the  auctioneer  makes  its  sellers.  Since  Manheim  began  simul- 
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ESRI 


Copyright  O  2005  ESRI  All  rights  reserved.  The  ESRI  globe  logo,  ESRI,  ArcMap.  www.esri.com,  and  Ardnfo  are  trademarks,  registered  trademarks,  or  service  marks  of  ESRI  in  the  United  States,  the  European  Community,  or  certain  other  jurisdictions 


E-Commerce 

casting  its  auctions  in  2002,  approximately  3,200  new  dealers 
have  come  on  board.  Luppino  adds  that  his  company  has  seen 
buyers  participate  in  sales  in  which  they  hadn’t  participated  in 
the  past. 

When  Manheim  launched  its  simulcasts,  the  company  knew  it 
would  have  to  create  a  realistic  simulation  of  the  auction  environ¬ 
ment  so  that  dealers  would  believe  watching  the  simulcast  was  as 
good  as  being  in  the  room.  So  Manheim  made  a  decision  not  to  cre¬ 
ate  an  experience  that  would  appeal  to  “the  lowest  common  denom¬ 
inator,”  says  Luppino.  “We  didn’t  want  to  build  on  dial-up  because 
it  would  prohibit  us  from  building  features  into  our  product  that 
would  make  the  simulcast  more  compelling,”  says 
Gordon  Warren,  VP  and  general  manager  of  Man- 
heim’s  dealer  operating  system,  Tracker,  who  used 
to  work  on  simulcasts.  “We  told  our  dealers,  You 
have  to  have  high-speed  [Internet  connections]  or 
else  you’re  going  to  have  a  miserable  experience.” 

To  simulate  a  live  video  feed,  Manheim  uses  a 
codec,  a  piece  of  software  that  converts  analog 
video  signals  into  a  digital  format  for  transmis¬ 
sion,  in  an  MPEG  file  format.  Luppino  says  codecs 
work  by  transmitting  video  stills  in  quick  succes¬ 
sion  directly  to  the  user’s  computer  so  that  those 
stills  look  like  they’re  moving— much  like  a  car¬ 
toon.  Manheim  opted  to  use  codecs  instead  of  a 
live  video  stream  because  in  an  auction  environ¬ 
ment  where  every  second  counts,  video  streams 
often  start  and  stop  due  to  the  number  of  people 
trying  to  access  that  stream  at  the  same  time.  If 
the  video  were  to  suddenly  stop  because  of  the 
amount  of  traffic  on  Manheim.com,  a  buyer  sit¬ 
ting  at  his  computer  might  miss  out  on  an  oppor¬ 
tunity  to  bid.  The  other  advantage  a  codec  holds 
over  streaming  video  is  that  it  doesn’t  have  to  be 
downloaded  onto  an  individual’s  computer;  the 
audio  and  video  are  served  directly  to  users 
through  the  browser.  And  it’s  cheaper  than  live 
video  because  Manheim  can  transmit  more  broad¬ 
casts  over  smaller  pipes.  (To  read  about  the  pros 
and  cons  of  codecs  and  other  technologies  dis¬ 
cussed  in  this  article,  see  “Which  Web  Technol¬ 
ogy  Is  Right  for  You?”  this  page.) 

PROVIDE  A  HUMAN  TOUCH 

One  thing  brick-and-mortar  stores  have  over  online 
stores— at  least  in  theory— is  a  salesperson  to  help 
you  when  you  have  a  question.  Now  that  more  con¬ 
sumers  have  broadband  connections,  it’s  possible 
for  companies  to  provide  virtual  salespeople  to 
offer  that  humanlike  touch.  For  example,  Ikea,  the 
Swedish  furniture  retailer,  has  created  Anna,  a 
graphical  representation  of  a  woman  who  tilts  her 
head,  blinks  and  smiles  as  she  answers  text-based 
questions. 


Ikea  launched  this  interactive  shopping  assistant  feature,  Ask 
Anna,  on  its  U.S.  website  in  2004  in  order  to  help  customers 
prepare  for  their  store  visits.  Because  Ikea  stores  are  so  far-flung 
(the  company  operates  only  26  stores  in  the  United  States),  cus¬ 
tomers  may  drive  hours  to  reach  one.  They  prepare  for  their  vis¬ 
its  in  advance  in  order  to  make  the  most  of  them— arriving  armed 
with  measurements  and  information  from  Ikea.com  about  the 
furniture  pieces  and  accessories  they  like. 

Melissa  Robinson,  central  services  manager  of  Ikea  Direct, 
Ikea’s  online  operation,  says  that  Ask  Anna  has  enabled  the  com¬ 
pany  to  reduce  call  center  volumes  by  making  it  easier  for  people 


Which  Web  Technology  Is  Right  for  You? 

Let  our  table  of  pros  and  cons  help  you  decide 


FLASH 

What  it  is:  A  graphics  animation 
program  written  and  marketed  by 
Macromedia. 

What  it’s  good  for:  You  can  use  Flash 
to  create  dynamic,  interactive  appli¬ 
cations  that  operate  smoothly  and 
quickly  because  they  reside  on  the 
user's  computer  and  don’t  require 
a  constant  connection  with  a  Web 
server  to  update  themselves. 

What  to  watch  out  for:  Just  because 
most  users  have  Flash  doesn’t  mean 
they  all  do.  Furthermore,  some  users 
perceive  Flash  applications  as  being 
“heavy”— meaning  they  think  they 
would  take  too  long  to  download, 
even  over  broadband. 

CODEC 

What  it  is:  Software  that  converts 
analog  video  signals  into  a  digital 
format  for  transmission. 

What  it's  good  for:  It’s  an  effective, 
low-cost  way  to  create  the  illusion  of 
streaming  video.  It’s  also  more  stable 
than  a  video  stream— it  doesn’t  get 
hung  up  when  too  many  people  try 
to  access  it  at  the  same  time. 

What  to  watch  out  for:  It  only  works 
well  for  videos  that  don't  have  a  lot 
of  activity  in  them,  such  as  a  meet¬ 
ing  or  a  simple  product  demonstra¬ 
tion.  It  won’t  work  well  if,  for  exam¬ 
ple,  the  product  you’re  demonstrat¬ 
ing  is  animated. 


BOTS 

What  they  are:  Intelligent  software 
agents  programmed  to  understand 
written  (and  sometimes  spoken) 
language. 

What  they're  good  for:  Bots 
can  supplement  your  company’s 
customer-service  initiatives  as  an 
alternative  to  your  call  center.  Bots 
can  even  cut  down  on  the  number  of 
e-mail  inquiries  customers  submit, 
according  to  Melissa  Robinson,  Ikea 
Direct’s  central  services  manager. 
What  to  watch  out  for:  Unless  they’re 
done  well,  they  may  not  be  helpful 
at  all  and  could  frustrate  and  alienate 
more  customers  than  they  impress. 

AJAX 

What  it  is:  A  programming 
language  for  developing  browser- 
based  applications  that  behave 
like  desktop  applications.  It  stands 
for  Asynchronous  JavaScript  with 
XML. 

What  it’s  good  for:  It’s  great  for 
making  websites  more  interactive 
and  easier  to  use  without  developers 
having  to  write  huge  amounts  of 
code  or  forcing  users  to  download 
and  install  browser  plug-ins. 

What  to  watch  out  for:  To  use  Ajax, 
you  need  programmers  with  years 
of  JavaScript  experience.  Also,  it 
won't  work  with  every  browser. 

-M.L. 
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E-Commerce 


to  find  information  on  its  website.  “We  wanted  to  find  a  way  to 
make  information  more  accessible,”  she  says. 

Anna  is  a  bot,  or  software  agent— a  software  program  that 
“intelligently”  answers  text-based  questions.  Ikea  created  a  knowl¬ 
edge  base  for  this  feature  consisting  of  1,600  questions,  each  with 
at  least  10  variations  and  2,100  answers  altogether  (because  there 
can  be  more  than  one  answer  to  the  same  type  of  question).  When 
a  user  clicks  on  an  Ask  Anna  link  anywhere  on  the  site,  a  pop-up 
window  opens  with  an  animated  representa¬ 
tion  of  Anna  (who  is  not  based  on  a  real  per¬ 
son),  along  with  a  text  message  in  which  she 
introduces  herself  as  Ikea’s  online  assistant. 

Users  can  enter  their  questions  in  a  box  at  the 
bottom  of  the  pop-up  window.  Within  three 
seconds  an  answer  appears  and  a  new  web¬ 
page  loads  with  additional  information. 

Developing  Ask  Anna’s  knowledge  base  alone  took  two  people 
six  to  eight  weeks  during  the  course  of  several  months,  says  Robin¬ 
son.  The  software  development  took  four  months.  Robinson  con¬ 
siders  the  development  costs  moderate  and  says  a  company 
looking  to  do  the  same  can  probably  expect  to  pay  less  than 
$500,000.  The  investment  in  such  a  new  technology  has  been 
worthwhile  for  Ikea.  “We  see  our  user  counts  constantly  increas¬ 
ing,”  she  says.  Between  5,000  and  10,000  people  use  Ask  Anna 
each  day.  In  the  year  after  the  feature  was  first  launched,  Robin¬ 
son  says,  call  center  volume  grew  a  mere  7  percent,  compared 
with  20  percent  growth  the  previous  year.  Robinson  also  says 
Ask  Anna  has  been  “especially  efficient  for  reducing  incoming  e- 
mails,  which  are  most  costly  to  manage.”  The  software  paid  for 
itself  in  less  than  a  year. 

Now  Ikea  is  expanding  the  database  so  that  customers  can  get 
help  assembling  products,  and  is  considering  ways  to  have  Anna 
answer  people’s  questions  verbally  to  make  the  interaction  more 
lifelike  and  conversational. 

Even  though  Anna  is  totally  2D,  customers  seem  to  be  impressed. 
Some  users  have  even  proposed  marriage  to  Anna.  “Several  times,” 
says  Robinson.  “People  are  connecting  with  Anna  on  that  level.  Part 
of  the  reason  she  gets  those  questions  is  people  having  fun  and 
part  of  it  is  people  thinking,  You  answered  my  question  and  you  did 
OK,  so  let’s  see  what  else  you  know.” 


THE  BENEFITS  OF  REAL-TIME  ANALYTICS 

Web  analytics  can  help  you  pinpoint  how  to  make  your  website 
more  engaging  and  easier  to  use.  There’s  a  host  of  products  on  the 
market  that  generate  Web  metrics,  but  few  provide  real-time  data. 
And  few  go  beyond  traditional  ways  of  measuring  customer 
behavior,  such  as  tracking  clickstreams  and  page  views,  to  tell 
you  precisely  what  individual  customers  are  doing  or  trying  to  do 
on  your  site.  But  Safeway.com  has  suc¬ 
cessfully  used  a  new  Web  monitoring 
product  that  tracks  individual  user  behav¬ 
ior  on  the  Web  in  real-time  in  order  to 
quickly  diagnose  usability  problems  and 
increase  revenue. 


Business  Signatures’  Customer  Intent  Processor  is  one  of  a  few 
new  products  that  help  companies  identify  what  customers  are 
trying  to  do  on  their  websites  in  real-time.  Safeway.com  deployed 
Business  Signatures’  software  in  November  2004.  The  software 
captures  the  entire  HTTP  stream  that  goes  through  a  company’s 
network  in  real-time.  It  then  matches  those  streams  to  sets  of 
activities  customers  can  engage  in  on  a  website,  such  as  search,  add 
to  shopping  cart,  checkout,  check  account  balance,  or  any  series 


Broadband  connections  make  it  possible  for 
companies  to  provide  virtual  salespeople 
for  a  humanlike  touch. 


of  activities  or  clicks  a  company  wishes  to  track. 

Safeway.com  used  the  software  to  determine  why  a  new  version 
of  a  feature  on  its  website  that  lets  shoppers  edit  their  grocery 
orders  wasn’t  working  properly.  Customers  had  complained  that 
changes  they  had  made  to  their  orders  using  the  order  edit  func¬ 
tion  weren’t  sticking.  So  the  online  grocer  set  the  software  to  mon¬ 
itor  what  happens  when  people  tried  to  edit  their  orders.  Joe 
Devine,  Safeway.com’s  CTO  at  the  time  the  software  was  deployed 
(the  current  CTO,  David  Popejoy,  came  on  board  in  October  2004), 
says  the  data  that  the  software  collected  showed  that  customers’ 
changes  weren’t  taking  because  customers  didn’t  realize  they  had 
to  click  an  additional  button  to  process  them.  Within  an  hour  of 
making  that  discovery,  Devine’s  developers  created  more  promi¬ 
nent  instructions  on  the  webpage  telling  customers  they  had  to 
click  one  more  button,  and  the  problem  was  solved. 

Devine  likes  the  intent  processor  because  it  makes  technical  and 
usability  problems  easier  to  diagnose.  He  says  it’s  also  simpler  to 
use  than  most  Web  monitoring  tools,  because  he  didn’t  have  to  run 
debugging  code  or  add  tags  to  his  pages  in  order  to  create  logs.  In 
addition,  he  used  the  software  for  more  traditional  Web  moni¬ 
toring  functions,  such  as  keeping  track  of  users’  activity  on  Safe- 
way.com  (known  as  session  management),  playing  back  users’ 
sessions,  as  well  as  collecting  metrics. 

Devine  won’t  provide  numbers,  but  says  that  between  the 
money  he  saved  by  replacing  older  Web  monitoring  tools  and  the 
increases  in  sales  that  came  from  quickly  fixing  problems  with  the 
site,  his  ROI  reached  seven  figures  within  eight  months  of  deploy¬ 
ing  the  software. 

“If  you  improve  the  customer  experience,  ease  of  use  and  navi¬ 
gability  on  your  site,  you  get  significant  returns,”  says  author  Ray- 
port.  Timberland,  Manheim,  Ikea  and  Safeway.com  can  testify  to  that. 
And  since  so  many  websites  remain  shackled  by  HTML,  there’s 

plenty  of  room  for  your  company  to  start 
using  these  new  technologies  to  differenti¬ 
ate  your  site  from  the  rest  of  the  pack.  BE] 


Seeing  Is  Believing 


For  an  online  demonstration  of  rich  Internet 
technology,  visit  www.cio. com/030106. 

cio.com 


Senior  Writer  Meridith  Levinson  can  be  reached 
at  mtevinson@cio.com. 
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solution  is,  to  say  the  least,  a  major  challenge. 
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reducing  costs.  This  enables  businesses  like  yours  to  effectively  address 
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support  and  service  network,  that  has  companies  like  yours  putting  Brother 
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resources  to  work  for  you.  Contact  us  today  so  we  can  show  you  how  we 
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Leadership  should  be 

more  participative  than  directive, 
more  enabling  than  performing. 

Mary  D.  Poole 


The  Charles  Hotel,  Cambridge,  Massachusetts 


Get  together  with  key  thinkers,  leading  CIO  practitioners  and  members  of  the  CIO 
Executive  Council  to  focus  on  sessions,  tools  and  counsel  that  help  you  address  the 
unique  leadership  challenges  CIOs  face: 

Howto  ••• 


be  embraced  as  a  business-savvy  member  of  the  senior  management  team. 

be  respected  by  a  technically-savvy  IT  staff. 

keep  abreast  of  technology  trends  that  show  promise. 

visualize  and  apply  technology  where  it  will  most  benefit  the  business. 


Keynote  Sessions: 

The  Unique  Leadership 
Challenges  of  the  CIO 
Warren  McFarlan,  Professor 
Emeritus,  Harvard  Business  School 

CIOs  have  unique  challenges 
balancing  the  demands  of  the 
business  with  the  capabilities  of 
technology.  The  CIOs  must  be  both 
a  corporate  and  an  IT  leader.  Mc¬ 
Farlan  also  talks  with  a  CEO  about 
the  criteria  for  measuring  a  CIO’s 
leadership  ability. 


Leadership  of  the  New  Distributed 
&  Global  IT  Workforce 

Business  in  today’s  global  econ¬ 
omy  demands  24/7  attention. 

New  technologies  and  a  global  IT 
organization  make  it  possible  to 
get  the  work  done.  As  more  types 
of  IT  work  are  outsourced,  CIOs 
and  IT  staffers  alike  need  different 
skill  sets.  We  look  at  approaches 
to  overcoming  some  of  the  chal¬ 
lenges  they  face. 


Closing  Address:  Leadership 
&  Ethics  —  Defining  Moments 
Joseph  L.  Badaracco,  Author  and 
Professor  of  Business  Ethics, 
Harvard  Business  School 

“Defining  moments”  occur  when 
work  choices  and  life  choices 
become  one.  Badaracco  examines 
the  right-versus-right  conflicts  that 
every  leader  faces  and  presents 
an  unorthodox  yet  practical  way 
for  you  to  think  about  and  resolve 
them. 


CIO  Concurrent  Workshop  Sessions: 


Focus  on  the  Future 
Section  A.  External  Focus: 

“Getting  Ahead  of  the  Puck” 

According  to  hockey  great  Wayne  Gretzky 
the  secret  to  success  is  not  knowing  where 
the  puck  is  —  but  where  it’s  going  to  be. 
How  you  can  better  understand  the  many 
external  forces  impacting  your  organiza¬ 
tion  —  and  anticipate  what  your  business 
and  IT  needs  will  be. 

Section  B.  Internal  Focus:  Getting 
in  Lock-Step  with  the  Business 

Whether  you  call  it  alignment  or  conver¬ 
gence,  a  close  relationship  between  IT 
and  the  lines  of  business  makes  for 
a  more  efficient  organization.  We  talk 
about  some  of  the  new  thinking,  tools 
and  best  practices  to  get  your  organiza¬ 
tion  working  in  harmony. 

Focus  on  Planning  and  Execution 
Section  A.  Risk  Analysis/Business 
Continuity  &  Crisis  Management 

Analyzing  and  balancing  risk  on  an 
enterprise  level  is  the  only  way  to  manage 
a  corporation  in  our  highly  distributed  and 
interconnected  world.  How  can  you  make 
better  business  decisions  and  improve 
how  you  handle  predictable  risks,  busi¬ 
ness  continuity  needs  and  handle  crises? 

Section  B.  Project/Portfolio/Business 
Process  Management 

Limited  resources  must  be  tunneled  to 
initiatives  with  strategic  fit  and  best 
payback  potential.  Application  backlog 
is  rated  the  number  one  hurdle  for  CIO 


success.  It  is  important  to  have  a  clear 
strategy  for  governing,  prioritizing  and 
rationalizing  IT/business  investments. 
CIOs  share  their  experience  in  this  work¬ 
shop. 

Focus  on  the  “Soft”  Skills 
Section  A.  Talking  the  Talk  with 
Senior  Management:  The  Arts  of 
Education,  Communication  and 
Persuasion 

CIOs  are  always  looking  for  help  in  com¬ 
municating  more  effectively  with  the 
other  C-level  executives  and  the  Board. 

In  these  sessions,  we  look  at  how  leading 
CIOs  in  several  industries  got  comfort¬ 
able  talking  the  talk. 

SectionB.  Getting  Street  Cred: 

What  Does  the  IT  Staff  Really  Want 
(and  Need)  from  the  CIO? 

Leading  an  IT  staff  has  its  own  peculiar 
challenges.  In  these  sessions,  we  talk 
with  some  of  our  Ones  to  Watch  Award 
winners  about  how  they  view  the  CIO’s 
role  in  mentoring,  coaching,  providing 
direction  and  growth  opportunities. 

Plus:  Tuesday  Evening 

Special  General  Session,  Dinner 
and  Presentation  of  CIO  Magazine’s 
2006  Ones  To  Watch™  Awards 

as  we  recognize  the  next  generation 
of  IT  leaders. 


“Leadership  is 
not  position.” 


action, 

Donald  H.  McGannon 


The  CIO  Leadership 
Conference  is  proudly 
underwritten  by 

amdci  # Sun 

microsystems 


Official  Host  Sponsors 

:::  BlackBerry 

i  R  i  s  e' 

VISUALIZE  INNOVATE  DELIVER” 

m  redhat. 

Symantec. 


Presented  by 
CIO  Magazine  in 
conjunction  with  the 
CIO  Executive  Council 


Business 

Technology 

Leadership 


CIO  Executive  Council 

The  Professional  Organization  for  CIOs 


Register  now  for  this 
one  of  a  kind  event! 

Visit  http://www.cio.com/conferences  by  March  31st 
and  take  advantage  of  our  “early  bird”  pricing  of  $300 
off  the  full  registration  fee.  Or  call  our  conference  office 
at  800-355-0246  for  more  information. 


SALES  AND  SERVICES 


CIO  SALES  OFFICES 

President  and  CEO 

Michael  Friedenberg 
508  935-4310 

Publisher 

Gary  J.  Beach  •  508  935-4202 

EAST  COAST 

VP  Sales,  East 

Bob  Bragdon  •  508  935-4443 

Regional  Sales  Director 

Kathy  Powers  •  201 634-2331 

Regional  Sales  Manager 

Ellie  St.  Louis -201 634-2332 
Senior  Sales  Associate 

Rhonda  Goodman 
201 634-2329 
Fax  •  201 634-9513 

NEW  ENGLAND 

Senior  District  Sales  Manager 

Andrew  Flaney  •  508  935-4586 
Sales  Operations  Manager 

Dawn  Cora  •  508  935-4092 
Fax  •  508  879-6063 

NORTH  CENTRAL 

Regional  Sales  Manager, 
Southwest 

Beth  DeVillez  •  847  759-2727 

Advertising  Sales  Associate 

Kim  Giovanni  •  847  759-2728 
Fax  •  847  759-2729 


WEST  COAST 

VP  Sales,  West 

Bob  Melk  •  415  975-2685 

Senior  Regional  Sales 
Manager 

Ai  Collins  •  415  975-2686 

Regional  Sales  Manager 

Kevin  Ebmeyer  •  415  975-2684 

Account  Executive 

Derek  Jung  *415  975-2683 
Fax  •  415  543-2358 

Senior  Account  Executive 

Sara  Mascall  •  415  978-3385 

Ad  Sales  Associate 

Devon  Slattery  •  415  975-2687 

SOUTHERN  CALIFORNIA 

Regional  Sales  Manager 

Kevin  Ebmeyer  •  415  975-2684 

ONLINE  SERVICES 

VP,  Integrated  Media 
and  Online  Sales 

Jim  Alla -508  988-6763 

Western  Online  Sales  Manager 

Jennell  Hicks  -415  243-8585 

Online  Account  Executive 

Danielle  Tetreault 
508  988-7969 

Online  Sales  Administrator 

Anne  Butera  •  508  988-6823 


CUSTOM 

PUBLISHING 

VP  of  Program 
Development,  IDG 

Charles  Lee  •  212  867-1229 

VP,  Integrated  Media 
and  Online  Sales 

Jim  Alla  *508  988-6763 

Director 

Mary  Gregory  •  508  988-6765 

Executive  Editor  and  Director 
of  Operations  Tom  Field 
Director,  Integrated  Project 
Management  Mo  Barrett 
Managing  Editor  Jim  Malone 
Senior  Project  Manager 
Amy  Greenleaf 
Project  Managers 
John  Danielowich, 

Jon  Fleinrich 

LIST  SERVICES 

Contact  Paul  Capone  of  IDG 
List  Services  at  508  988-7537 
or  pcapone@idglist.com. 

REPRINT  SERVICES 

For  article  reprints  (100 
quantity  or  more),  please 
contact  Jennifer  Eclipse  at 
PARS  International  at  212  221- 
9595  x237  or  via  e-mail  at 
jeclipse@parsintl.com. 


\  ! 

CIO  is  published  in  the 
U.S.  as  well  as  in: 

Australia,  CIO  Australia 

www.idg.com.au 

Canada,  CIO  Canada 

cio.itworldcanada.com 

China,  CEO  &  CIO  China 

www.ceocio.com.cn 

France,  CIO  France 

www.idg.fr/cio 

Germany,  CIO  Germany 

www.cio.de 

India,  CIO  India 

91-80-521-0309/12 

Japan,  CIO  Japan 

www.idg.co.jp 

The  Netherlands, 

CIO  Netherlands  www.cio.nl 
New  Zealand,  CIO  New  Zealand 
www.idg.co.nz 
Norway, 

CIO  Business  Standard 
www.business-standard.no 

Poland, 

CXO  Poland  www.cxo.pl 

Singapore,  CIO  ACEN/ 

Flong-Kong  www.idg.com.sg 
South  Korea,  CIO  Korea 
www.cio.seoul.kr 
Sweden,  CIO  Sweden 
www.cio.idg.se 

For  further  sales  information: 

www2.cio.com/marketing/ 

aboutcio/contacts.cfm 


INDEX  OF  COMPANIES  AND  ADVERTISERS 


Page  numbers  refer  to  the  first  page  of  the  article(s)  in  which  the  company  has  a  substantial  mention.  This  index 
is  provided  as  a  service  to  readers.  The  publisher  does  not  assume  any  liability  for  errors  or  omissions. 


COMPANY  INDEX 

ABF  Freight  System  Inc . 40 

Allurent  Inc . 58 

AmericaSpeaks  . 15 

Black  Duck  Software  Inc . 15 

Boeing  Co.,  The . 40 

Brown  Line  Inc . 40 

Build-a-Bear  Workshop  Inc . 58 

Business  Signatures  Corp . 58 

Christian  &  Timbers  . 15 

Citibank  . 15 

Comcast  Spectacor  . 30 

Deloitte&  Touche  LLP . 50 

DHL  International  Ltd . 15 

Dimension  Data  Inc . 50 

eBay  Inc . 15 

eMarketer  Inc . 58 

Evergreen  Systems  Inc . 15 

Fluid  Inc . 58 

Forrester  Research  Inc . 58 

General  Electric  Co . 15 

General  Motors  Corp . 30 

Google  Inc . 15 

Gracenote  Inc . 15 

GroceryWorks  Holdings  Inc . 58 

Hasbro  Inc . 40 

Hudson  Highland  Group  . 15 

IBM  Corp . 40 

IGN  Entertainment  Inc . 15 

Ikea  International  A/S . 58 

IMS  Worldwide  Inc . 40 

Input  . 15 

Intermix  Media  Inc . 15 

Juniper  Networks  Inc . 15 


Korn/Ferry  International  . 50 

Kraft  Foods  Inc . 50 

Leadership  Capital  Group  . 50 

Manheim  Auctions  . 58 

Merrill  Lynch  &  Co.  Inc . 50 

Microsoft  Corp . 15 

Molecular  Inc . 58 

Motorola  Inc . 40 

MTC  Holdings . 15 

News  Corp . 15 

Orchid  Cellmark  Inc . 15 

PriceGrabber.com  LLC  . 58 

Procter  &  Gamble  Co.,  The  . 40 

QS  Labs  Inc . 15 

Sabre  Holdings  Corp . 50 

Sage  Software  Inc . 15 

Samsung  Electronics  . 30 

Sandler  &  Travis  Trade  Advisory 

Services  Inc . 40 

Sara  Lee  Corp . 40 

Scout.com  . 15 

Sears  Brands  LLC . 40 

Secured  Funding  Corp . 15 

Shopzilla  Inc . 58 

Skype  Ltd . 30 

Stanley  Works,  The  . 50 

Target  Corp . 40 

Timberland  Co.,  The  . 58 

Trade  Innovations  Inc . 40 

United  Parcel  Service  Inc . 40 

Valve  Corp . 30 

Verizon  Communications  Inc . 50 

Wal-Mart  Stores  Inc . 40 

Williams-Sonoma  Inc . 58 


Yahoo!  Inc . 15 

Yankee  Candle  Co.  Inc.,  The  . 58 

Z  Resource  Group  Inc . 50 

ADVERTISER  INDEX 

3Com's  Tipping  Point  . 2 

AT&T  . 17 

Audio  Visual  Innovations  . 11 

Avaya  . C3 

BMC  Software  Inc . 8 

Brother  International  . 67 

CXO  Media  Inc . 24,68,71 

EDS  . 7 

EMC2  Corp . 53 

ESRI  . 63 

Fujitsu  Computer  Systems  Corp . 19,  65 

IBM  Corp . 37,39,61 

Incentra  Solutions  . 47 

Intel  Corp . 45 

Interwoven  Inc . 57 

Microsoft  Corp . C2,  22 

Motion  Computing  Inc . 5 

Motorola  Inc.  (regional)  . 49 

Oracle  Corp . 29 

Postini  Inc . 27 

Protiviti  Inc . 31 

Ricoh  . 25,33 

SAS  . 14 

Symantec  Corp . C4 

Tata  Consultancy  Services  Ltd . 21 

Verizon  Wireless  . 55 

Xerox  Corp . 13 


I 


CIO  CONTACT 
INFORMATION 

Editorial,  Advertising  and 
Business  Offices:  CXO  Media  Inc., 
492  Old  Connecticut  Path,  P.O. 
Box  9208,  Framingham,  MA 
01701-9208,  508  872-0080. 

CIO  (ISSN  0894-9301)  is 
published  semimonthly  and  as 
a  combined  issue  Dec.  15/Jan.  1 
by  CXO  Media  Inc.  Periodicals 
postage  paid  at  Framingham,  MA, 
and  at  additional  mailing  offices. 
Canada  Publications  Mail  Agree¬ 
ment  Number  1902075.  CANA¬ 
DIAN  POSTMASTER:  Please 
return  undeliverable  copy  to  P.O. 
Box  1632,  Windsor,  ON  N9A  7C9. 

Permissions:  Copyright  2005 
by  CXO  Media  Inc.  All  rights 
reserved.  Reproduction  of 
material  appearing  in  CIO  is 
forbidden  without  written 
permission.  Send  all  requests 
to  Yadira  Pizarro,  PARS  Interna¬ 
tional,  212  221-9595,  Ext.  231, 
or  yadira@parsintt.com . 

Photocopy  Rights:  Permission 
to  photocopy  for  internal  or 
personal  use  or  the  internal  or 
personal  use  of  specific  clients  is 
granted  by  CIO  for  users  through 
the  Copyright  Clearance  Center, 
provided  that  the  base  fee  of  $3 
per  copy  of  the  article,  plus  $.50 
per  page  is  paid  directly  to  Copy¬ 
right  Clearance  Center,  27  Con¬ 
gress  Street,  Salem,  MA  01970. 
Please  specify:  ISSN  0894-9301. 
Permission  to  photocopy  does 
not  extend  to  contributed  articles 
followed  by  this  symbol:  j:. 

Subscriptions:  CIO  is  free  to  qual¬ 
ified  information  executives.  To 
apply,  use  our  online  subscription 
form  at  www.subscribe.cio.com. 
Subscriptions  are  also  available 
on  a  paid  basis  at  a  rate  of  $95  for 
the  United  States  and  Canada, 
$195  International  (payable  in 
U.S.  funds  only)  and  may  be 
ordered  online  at  www.subscribe 
.cio.com/services.html.  Or 
address  inquiries  to  CIO,  P.O.  Box 
489,  Northbrook,  I L  60065-0489; 
866  354-1125.  Please  allow  four 
to  six  weeks  for  a  new  subscrip¬ 
tion  to  begin.  The  single  copy 
price  is  $9  for  the  United  States 
and  Canada,  and  $15  Interna¬ 
tional.  Prepayment  is  required, 
payable  in  U.S.  funds. 

Change  of  Address:  Please  go  to 
www.omeda.com/custsrv/cio 
and  follow  the  online  instructions. 

Postmaster:  Send  change  of 
address  to  CIO,  P.O.  Box  489, 
Northbrook,  IL  60065-9816. 
Printed  in  the  U.S. A. 


7  0 


MARCH  1,  2006  |  www.cio.com 


Itfe  OK  to  show  off  to  your  friends 
that  you  were  in  CIO. 


But  it’s  even  better  to 
show  your  customers. 


What  better  way  to  inform  your  key  customers 
of  your  editorial  coverage  in  CIO  than  through 
customized  Editorial  Reprints? 


Leverage  the  positive  impact  of  your  editorial 
coverage  by  using  reprints  for  direct  mail 
campaigns,  seminar  promotions,  employee 
communications,  recruiting  and  marketing 
programs.  Let  us  enhance  your  reprints  with  your  company’s 
logo,  address,  and  sales  message.  Reprints  make  great  SALES  tools 
for  trade  shows,  mailings  or  media  kits. 


And  while  a  framed  copy  of  your 
article  will  look  neat  on  your  wall,  it 
will  look  even  better  in  the  hands  of 
your  customers. 


Business  Technology  Leadership 


PORS 


Service. 

[  international  CORP.  I 

1  MANAGED  REPRINT  PROGRAMS  | 


For  more  information  on  customized  editorial  reprints  in  volume  quantities, 
contact  Jennifer  Eclipse  at  212.221.9595  x237  or  email  jeclipse@parsintl.com. 
Website:  www.magreprints.com/quickquote.asp 


endlines 


BY  SCOTT  BERINATO 


ca® 


CAN  YOU  SEE  ME  NOW? 


Department  of  Perpetual  Hype 


Sept.  '87  Videoconferencing  hardware 
will  build  slowly  over  the  next  five  years. 
(PC  Week) 

April  '89  After  many  false  dawns,  video- 
conferencing  seems  at  last  to  be  taking 
off  as  a  serious  commercial  activity. 

(. Financial  Times) 

Oct.  '91  Videoconferencing  here  at  last? 

0 Computing  Canada) 

Sept.  '93  Whether  the  airlines  like  it  or 
not,  videoconferencing  has  arrived. 

(. Air  Transport  World) 

May  '94  Videoconferencing  is  reported 
to  be  on  the  threshold  of  a  dramatic 
expansion  similar  to  fax  a  few  years  ago. 
(The  Futurist) 

Nov.  '96  Videoconferencing  is  poised  for 
takeoff.  (Communications  International) 


Dec.  '98  1999  is  the  “make-or-break 
year”  for  videoconferencing  because 
all  the  required  technology  is  finally 
in  place.  (World  Trade) 

May  '99  Video  to  kill  face-to-face 
meetings?  (Works  Management) 

Oct.  ’00  We’ve  been  talking  about 
“the  year  of  videoconferencing”  for 
about  seven  years  now,  and  we  still 
haven’t  seen  a  market  acceptance. 
(Computer  Reseller  News) 

April  '01  While  videoconferencing  was 
viewed  as  an  expensive  and  confusing 
technology  in  its  early  days,  the  truth  is 
that  even  diehard  skeptics  have  now 
been  silenced.  (New  Zealand  Management) 

July  ’01  The  next  great  thing:  video 
instant  messaging.  (Network  World) 


Butt  is  a  believer.  (EMedia  Magazine) 

Sept.  '02  Despite  all  of  the  improve¬ 
ments  in  videoconferencing,  the  technol¬ 
ogy’s  really  not  mature  yet.  ( Boston.com ) 

Dec.  '03  Videoconferencing  technology 
has  advanced  to  such  a  degree  that  it  is 
now  easily  affordable  by  any  business. 
(New  Zealand  Business) 

Nov.  '04  Forty  years  after  AT&T  first 
showed  a  videophone  at  the  New  York 
World’s  Fair,  videoconferencing  remains 
a  niche  application  with  limited  avail¬ 
ability  in  most  enterprises.  (Business 
Communications  Review) 

Jan.  '05  I  wouldn’t  be  surprised  if  per¬ 
sonal  videoconferencing  slowly  becomes 
commonplace  in  the  next  five  to  10  years. 
(Newark  Star-Ledger) 


June  ’97  This  is  the  year  videoconferenc¬ 
ing  will  come  of  age,  the  experts  say.  Of 
course,  they  said  that  last  year,  and  the 
year  before  and,  well,  just  about  every 
year  since  that  legendary  videophone 
demo  at  the  1964  World’s  Fair.  This  time, 
however,  the  optimistic  prognosticators 
just  might  be  right.  (Network  World) 


Oct.  ’01  There  are  so  many  situations 
where  videoconferencing  doesn’t  work. 
(The  Atlanta  Journal  Constitution) 

Nov.  ’01  “Videoconferencing  has  been 
around  for  20  years,  and  every  year  the 
industry  pundits  say  this  is  going  to  be 
the  year  that  videoconferencing  really 
takes  off,”  says  Dave  Butt.  But  this  time. 


Jan.  '06  Many  business  executives 
acknowledge  that  connecting  via  video- 
conferencing  might  be  easier  and  less 
costly  than  battling  the  harshness  of 
post-9/11  air  travel,  but  almost  all  say 
that  nothing  gets  the  job  done  better  than 
sitting  across  the  desk  from  key  players. 
(Wisconsin  State  Journal) 
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ILLUSTRATION  BY  SERGE  BLOCH 


MULTIPLE  PHONE  NUMBERS 
ARE  A  HASSLE  EVERYONE 
HAS  TO  LIVE  WITH. 


WITH  AVAYA  IP  TELEPHONY,  JUST 
ONE  NUMBER  CAN  REACH  YOU 
ANYTIME,  ANYWHERE. 
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AVAyA 


COMMUNICATIONS 
AT  THE  HEART  OF  BUSINESS 


Discover  What’s  Possible.  Register 

for  the  Virtual  Technology  Summit 
at  avaya.com/vtechsummit 


VIRTUAL 
TECHNOLOGY 
SUMMIT  2006 


FIRST  500  REGISTRANTS  WILL  RECEIVE 
A  SWISS  ARMY  USB  LOADED  WITH 
VALUABLE  INSIGHTS 


No  one  can  promise  complete  email  security  and  availability.  We  don’t  live  in  that  kind  of  world. 
Yet  one  company  has  earned  a  worldwide  reputation  for  making  email  as  secure  and  available  as 
it  is  important.  A  company  that  not  only  screens  out  viruses,  spam  and  spyware,  but  also  provides 
solutions  for  speedy  recovery  in  case  of  system  failure.  A  company  that  reduces  storage  costs 
by  archiving  to  secondary  storage  and  blocking  unwanted  emails.  A  company  that  provides 
management  tools  for  efficient  email  retention  and  fast  email  discovery.  A  company  that  does 
email  right.  Symantec.  Because  we  know  it’s  not  just  email,  it’s  your  business.  For  more 
information  visit  www.symantec.com/esa  or  call  800-745-6054  BE  FEARLESS. 


Symantec,. 


i.  All  rights  reserved.  Symantec 
or  registered  trademarks  of 
in  the  U.S.  and  other  countries. 


NO  VIRUSES. 

NO  SPAM. 

NO  DOWNTIME. 
EMAIL  DONE  RIGHT. 


